TCP包状态检测系统的硬件设计与实现  

Hardware Design and Implementation of TCP Packets State Detection System

作　　者：黄诚学 

机构地区：[1]武汉市74223信箱,武汉430074

出　　处：《舰船电子工程》2012年第4期133-136,共4页Ship Electronic Engineering

摘　　要：提出了一种利用硬件实现的TCP包状态检测系统模型,与传统的状态检测系统的区别在于:1)提出established状态时的数据匹配,以防止包数据的攻击;2)利用哈希算法快速存放、查找信息的特点实现状态信息的存储和转换;3)采用时间地址循环超时管理策略来管理超时的连接。实验结果表明,该设计在能防止一些网络数据攻击的基础上快速准确地实现TCP状态转换功能。The article describes a TCP packets state detection system based on hardware. Compared with traditional state detection sys- tem, some new methods are presented. First, in order to prevent packets data intrusion, the data matching of established state is presented; Second, the use of features of hash algorithm fast and storage, to find information to achieve state of information storage and conversion; Third, the timeout address cycle management strategy is used to manage the connection timed out. Experimental results show that the TCP state transition function of this system can he achieved quickly and accurately, while it can prevent some packets data attacking.

关 键 词：TCP 状态检测 硬件 匹配 循环管理策略 

分 类 号：TP39[自动化与计算机技术—计算机应用技术]