一种硬件规则匹配算法的研究与实现  

Research and Implementation of Hardware Based Rule Matching Algorithm

作　　者：曹春霞[1] 刘嘉勇[1] 李云照[1] 

机构地区：[1]四川大学电子信息学院,四川成都610065

出　　处：《通信技术》2010年第5期119-120,123,共3页Communications Technology

摘　　要：网络的高速发展给人们的生活带来了便利,但网络入侵等非法应用妨碍了互联网的正常使用,高效的规则处理系统可以保护网络免受攻击。文中针对当前各种规则匹配算法处理速度慢,无法满足高速网安全应用的需求,提出了一种基于硬件的规则匹配算法。该算法通过向量运算完成规则匹配,并使用硬件并行处理,大大提高了规则匹配的匹配速度。设计并实现了一个基于该算法的硬件匹配单元,并通过实验验证该算法完全可以满足高速网络中入侵检测等数据处理要求。The rapid development of Internet brings us much convenience,while such illegal activities on Internet as network intrusion hampers the normal use of the Internet.Highly-efficient rule processing systems could prevent the network from being attacked.For the processing speed of current rule matching algorithms is slow,and could not keep up with the high-speed back-bone network security applications,a new rule matching algorithm based on hardware is proposed,which implements rule matching by vector operation.The vector operation is realized in parallel processing on hardware,thus accelerating the rule matching speed greatly.A hardware model of rule matching is designed and implemented.Simulation experiment indicates that the performance of this algorithms could satisfy the requirement of IDS data processing in the high-speed back-bone network.

关 键 词：网络安全 规则匹配 硬件 高速网 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]