Looking for breakthrough ideas for innovation challenges? Try Patsnap Eureka!

High speed block detecting method based on stated filter engine

A technology of high-speed grouping and detection method, applied in the direction of digital transmission system, electrical components, transmission system, etc., can solve the problems of memory capacity and logic complexity limitation, low resource usage of high-speed grouping detection method, etc., to achieve the effect of small hardware overhead

Inactive Publication Date: 2006-06-07
TSINGHUA UNIV
View PDF0 Cites 12 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

For practical application, the resources used by the scheme must be reasonable, and the hardware-implemented scheme is often limited by memory capacity and logic complexity
[0004] The high-speed packet detection method based on Bloom filter has low resource usage and can meet the requirements of the detection system for processing speed and supporting a large rule set. However, there are scalability problems when processing longer feature strings.

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • High speed block detecting method based on stated filter engine
  • High speed block detecting method based on stated filter engine
  • High speed block detecting method based on stated filter engine

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0044] See system composition figure 2, the arriving packet first passes through a front-end system of a Bloom filter engine composed of a set of Bloom filters for characteristic strings of different lengths, and the engine matches the content of the packet with the characteristic substring. Then, we use the analyzer and the prefix register file to form the background system. This is because (1) the results of the Bloom Filter search are not exact matches, and there is a certain probability of false detection, although this probability can be reduced to a very low level through the design of the system , but still need an analyzer to do exact matching; (2) We only match the rule substring, and need to record the current matching state in the prefix register file and the analyzer, so as to realize the matching function of long characteristic strings.

[0045] The basic principle of Bloom filter is to use k hash functions to calculate k hash values ​​for each string X in the ru...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

This invention relates to a high grouping detection method base on state filter engine belonging to router field of computer network. It features setting high speed grouping detection module based on state filter engine, which can detects at high speed the grouping reaching to router and recognizes the grouping containing malicious codes (worm and virus). Said module stores substring match state by quick search list and prefix register file, the hardware parallel searching filter and prefix register file to obtain high speed detection grouping. Said module can accurately find out the grouping containing malicious codes in router at high speed.

Description

technical field [0001] A high-speed packet detection method based on a stateful filter engine belongs to the technical field of computer network routers. Background technique [0002] The current open structure and design of the Internet does not give much consideration to security, and lacks the necessary constraints on various malicious attacks on the network, including viruses and worms. At present, there are many studies on how to deploy new functions in end systems, access routers, or core routers to increase security. High-speed packet inspection is a widely used method against network malicious attacks, and it is becoming more and more widely used technology. It detects malicious codes by detecting the content in the group, and effectively protects the network and the end system. [0003] The biggest challenge faced by current high-speed packet detection methods is the increasing network transmission rate and the diversity of attack methods. Algorithms for group de...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
IPC IPC(8): H04L12/26H04L29/06
Inventor 徐恪叶明江崔勇
Owner TSINGHUA UNIV
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Patsnap Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Patsnap Eureka Blog
Learn More
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic, Popular Technical Reports.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap|About US| Contact US: help@patsnap.com