面向深度分组检测的高速数据分组解析结构  

Deep packet inspection oriented high speed packet parsing architecture

作　　者：董永吉[1] 郭云飞[1,2] 黄万伟[1] 黄慧群[1] 

机构地区：[1]国家数字交换系统工程技术研究中心,河南郑州450002 [2]解放军理工大学指挥信息学院,江苏南京210007

出　　处：《通信学报》2013年第6期156-164,共9页Journal on Communications

基　　金：国家重点基础研究发展计划("973"计划)基金资助项目(2012CB315901);国家高技术研究发展计划("863"计划)基金资助项目(2011AA01A103);国家科技支撑计划基金资助项目(2011BAH19B01)~~

摘　　要：提出了一种面向深度分组检测的高速数据分组解析结构BiPPCS(bidirectional packet parsing architecturefor content security)。结构采用内容萃取树描述协议的耦合关系从而提高了数据分组解析的灵活性;利用硬件双向并行流水线提升了数据分组解析的处理速率;通过使用节点映射算法来均衡各级流水线上的节点数目优化存储空间;分析和仿真显示BiPPCS在处理速率、空间利用率等方面能取得较好的均衡。A deep packet inspection oriented high speed packet parsing architecture called BiPPCS （bidirectional packet parsing architecture for content security） was proposed. Firstly, the content extraction tree was used to describe the cou- pling of the protocol relationship to improve flexibility of the packet parsing. Secondly, hardware bi-directional parallel pipeline was used to enhance the processing rate of the packet parsing. Thirdly, a node mapping algorithm was used to balance the number of nodes on all pipeline stages to optimize the storage space. Analysis and simulation show that BiPPCS gets balance among the rate processing, resource consumption and other aspects.

关 键 词：数据分组解析 深度分组检测 二叉trie树 网络安全 可重构 NETFPGA 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]