高速IDS系统中读写缓冲区的互斥机制  

A Buffer Access Algorithm in High-Speed IDS

作　　者：王晨[1] 龚俭[1] 廖闻剑[1] 

机构地区：[1]东南大学计算机科学与工程系,江苏省计算机网络技术重点实验室,南京210096

出　　处：《计算机工程与应用》2003年第31期149-151,158,共4页Computer Engineering and Applications

基　　金：国家自然科学基金项目资助(编号:90104031)

摘　　要：在网络入侵检测系统中,通常需要在内存中开辟缓冲区对网络报文进行采集和分析,但是传统的读写缓冲区的互斥机制在高速网络环境中的效率都不甚理想,无法满足对高速IDS系统的性能需求。该文提出的一种基于并发锁机制的双缓冲区互斥机制可以改善传统锁机制的资源利用率,很好地解决了报文到达流和报文处理能力之间的性能瓶颈问题,显著地提高了IDS系统的性能。An access algorithm of buffer is usually used for collecting and analyzing network packets in network intrusion detection systems using misuse detection methods.However traditional access algorithm s of buffer have indicated unsatisfactory efficiencies over high-speed networks,which can not reach the performance requirements in high-speed IDS.This paper brings forward an access algorithm based on lock algorithm,with which the performance requirements in analyzing packets in a high-speed environment have been met rather successfully and the bottle-neck between the reaching flow and the ability of analyzing packets have been solved.

关 键 词：互斥机制 入侵检测系统(IDS) 锁机制 缓冲区管理 

分 类 号：TP301[自动化与计算机技术—计算机系统结构]