本文選題：流分類 + 前綴分組表�。� 參考：《合肥工業(yè)大學(xué)》2014年碩士論文

【摘要】：隨著計(jì)算機(jī)網(wǎng)絡(luò)的高速發(fā)展,對(duì)網(wǎng)絡(luò)設(shè)備的數(shù)據(jù)處理能力要求也越來(lái)越高。流分類技術(shù)將數(shù)據(jù)包按照指定的規(guī)則分類,從而提高網(wǎng)絡(luò)設(shè)備的處理和轉(zhuǎn)發(fā)速度,是防火墻和UTM網(wǎng)關(guān)等網(wǎng)絡(luò)設(shè)備的關(guān)鍵技術(shù)。目前,流分類研究主要集中在多維、大規(guī)模規(guī)則庫(kù)下如何提高流分類的時(shí)空效率。本文介紹了流分類技術(shù)的研究背景和現(xiàn)狀,以及經(jīng)典的流分類算法,包括BV算法、ABV算法、AFBV算法、RFC算法等,并分析和比較了這些算法的時(shí)間和空間性能。針對(duì)ABV算法空間開(kāi)銷大,AFBV算法時(shí)間效率低,本文提出基于前綴分組表的位向量流分類算法——BV。PBV算法采用分步查找,首先在前綴分組表和位向量圖中進(jìn)行查找,并將兩次匹配結(jié)果取交集；然后將數(shù)據(jù)包的協(xié)議字段與交集中的規(guī)則逐一匹配,得到最終分類結(jié)果。通常規(guī)則庫(kù)中可能存在多個(gè)規(guī)則對(duì)應(yīng)相同的IP地址前綴。PBV算法首先按源／目的IP地址前綴,將規(guī)則庫(kù)所有規(guī)則劃分成若干個(gè)前綴分組,使得規(guī)則庫(kù)中的多個(gè)規(guī)則映射為前綴分組表中的一個(gè)分組,從而使前綴分組表的規(guī)模遠(yuǎn)小于規(guī)則庫(kù)的規(guī)模,用前綴分組表取代原來(lái)的規(guī)則庫(kù),提高了匹配效率。對(duì)源／目的端口號(hào)字段進(jìn)行值域劃分,建立位向量圖,無(wú)需進(jìn)行位向量聚合,減少了內(nèi)存開(kāi)銷。最后,基于Linux系統(tǒng)Netfilter框架,設(shè)計(jì)并實(shí)現(xiàn)了基于PBV算法的流分類器,并應(yīng)用于UTM網(wǎng)關(guān)。對(duì)PBV算法的性能進(jìn)行了測(cè)試,實(shí)驗(yàn)結(jié)果表明,PBV算法在大規(guī)模規(guī)則庫(kù)下具有良好的時(shí)間和空間性能。
[Abstract]:With the rapid development of computer network, the data processing ability of network equipment is higher and higher. Stream classification technology classifies packets according to the specified rules, thus improving the processing and forwarding speed of network devices, which is the key technology of network devices such as firewalls and UTM gateways. At present, the research of stream classification mainly focuses on how to improve the spatio-temporal efficiency of stream classification under the multi-dimensional and large-scale rule base. This paper introduces the research background and present situation of flow classification technology, as well as classical flow classification algorithms, including BV algorithm, ABV algorithm, AFBV algorithm and RFC algorithm, and analyzes and compares the time and space performance of these algorithms. In view of the low time efficiency of ABV algorithm with large space overhead, this paper proposes a bit-vector flow classification algorithm based on prefix grouping table BV.PBV algorithm uses step by step lookup, which is first found in prefix grouping table and bit-vector graph. Then the protocol fields of the packets are matched with the rules of the intersection set one by one to obtain the final classification results. Usually there may be several rules corresponding to the same IP address prefix. PBV algorithm first divides all rules of the rule base into several prefixes according to the source / destination IP address prefix. The rules in the rule base are mapped to one group in the prefix grouping table, so that the scale of the prefix grouping table is much smaller than the size of the rule base, and the matching efficiency is improved by replacing the original rule base with the prefix grouping table. The source / destination port number field is divided and the bitvector graph is established without the need for bit vector aggregation, thus reducing the memory cost. Finally, based on the Netfilter framework of Linux system, a stream classifier based on PBV algorithm is designed and implemented, and it is applied to UTM gateway. The performance of the PBV algorithm is tested. The experimental results show that the algorithm has good performance in time and space under the large-scale rule base.
【學(xué)位授予單位】：合肥工業(yè)大學(xué)
【學(xué)位級(jí)別】：碩士
【學(xué)位授予年份】：2014
【分類號(hào)】：TP393.08

【相似文獻(xiàn)】

相關(guān)碩士學(xué)位論文 前1條

1 賀亞威;基于前綴分組表的位向量流分類算法及應(yīng)用研究[D];合肥工業(yè)大學(xué);2014年

，

本文編號(hào)：1931590