基于多核防火墙的防病毒引擎设计与实现  

Design and Implementation of Anti-Virus Engine Based on Multicore Firewall

作　　者：徐浩 周利斌 

机构地区：[1]联想网御科技(北京)有限公司,北京100086

出　　处：《信息安全与通信保密》2010年第2期95-96,99,共3页Information Security and Communications Privacy

基　　金：2007年度电子信息产业发展基金第二批项目"电信级防火墙研发与产业化"

摘　　要：提出了一种基于多核的防病毒引擎的设计模型,并根据此模型实现了一款包含防病毒引擎的防火墙,经过测试表明,此款多核防病毒引擎的实现与传统防病毒引擎相比性能优异,满足高性能网络安全的需要。该模型主要有以下几个特点:解决多核硬件本身的报文乱序的问题而造成的对AV引擎的影响,从而达到减少漏报的功能;在多核数据平面实现基于报文流的查找,不进行报文的拷贝而实现跨包查找病毒的功能。This paper proposes a multicore-based parallel processing model for anti-virus （AV） protection engine, and on the basis of this model, aAV protection engine is established. Performance test indicates that this AV protection engine is much more functional as compared with the traditional AV protection engine, and could fairly meet the security requirement of high-performance network. The model is of the following principal characteristics： a. to solve the disorder packets problems of multicore hardware itself caused by the impact of the AV engine and thus achieve the reduction of miss probability; b. to realize packet flow- based finding on multicore plane, and thus without a copy of the message, achieve virus-finding function across the packets.

关 键 词：防病毒 多核 并行处理 架构 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]