用于高速入侵检测的工业物联网协议驱动  

Industrial IoT Protocol Driver for High Speed Intrusion Detection

作　　者：季杰[1,2] 白瑞林[1,2] 陈大峰[1,2] 

机构地区：[1]江南大学轻工过程先进控制教育部重点实验室,江苏无锡214122 [2]江南大学智能控制研究所,江苏无锡214122

出　　处：《自动化仪表》2012年第12期42-45,共4页Process Automation Instrumentation

基　　金：国家自然科学基金资助项目(编号:60804013);产学研合作基金资助项目(编号:011002)

摘　　要：为了解决工业物联网协议栈所面临的高速入侵检测的吞吐量问题,提出了一种针对Windows平台的协议栈优化方法。分别指出了使用指令时间比分析协议栈高吞吐量的瓶颈所在,以及使用DMA技术解决协议栈内存操作速度的问题。针对协议栈计算效率问题,给出了基于SSE指令的哈希计算方法,并采用基于多核CPU的多线程协议栈解决协议栈运行效率问题。测试表明,在CPU配置为E5200、3 GB内存的系统中,该协议栈对系统资源损耗小,并使检测速度提高30%以上,能够满足工业对数据流速率的需求。To solve the throughput issue of intrusion detection in industrial Interact of things （ IIoT ） protocol stack, the optimization method of protocol stack for Windows platform is proposed. The bottleneck of high throughput is determined respectively by using time and cycle per instruction （CPI ） , the operation speed of memory is solved by using DMA technology. Aiming at the computational efficiency for protocol stack, the Hash algorithm based on SSE instruction is given; in addition, the operational efficiency of the protocol stack is resolved by adopting multithread protocol stack of multi-core CPU. The test shows that in the system composed of E5200 CPU and 3 GB memory, system resource loss is small with this protocol stack, and the detection speed enhances 30%, the industrial demand for data flow rate is met.

关 键 词：物联网 协议栈 多核处理 过滤驱动 网关 入侵检测 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]