A parallel algorithm for protocol reassembling
作者： Xiaoling Zhao , Jizhou Sun , Shishi Liu , Zunce Wei
DOI: 10.1109/CCECE.2003.1226040
关键词:
摘要: In this paper, we devise and implement a parallel protocol reassembling algorithm in application layer for large scale network intruding. Conventional intrusion detection systems (NIDS) scan the incoming IP packets judge attack types by sensitive information matching. our fragments TCP stream are reassembled into an entire datagram which is searched field. This increases performance even under hostile loads enables efficient high speed networks. A high-performance presented implemented with SMTP protocol.
sci-hub.se 参考文章(3)
Martin Roesch, Snort - Lightweight Intrusion Detection for Networks usenix large installation systems administration conference. pp. 229- 238 ,(1999)
G Hipper, D Tavangarian, A concurrent network architecture for cost-efficient parallel computing using workstation clusters Simulation Practice and Theory. ,vol. 6, pp. 197- 218 ,(1998) , 10.1016/S0928-4869(97)00031-1
M. Necker, D. Contis, D. Schimmel, TCP-Stream reassembly and state tracking in hardware field-programmable custom computing machines. pp. 286- 287 ,(2002) , 10.1109/FPGA.2002.1106687