摘 要:
随着千兆网络开始在国内大规模普及,对千兆线速入侵检测系统等高性能网络安全产品的需求日益迫切。本文基于IXP2400、pp1200、TCAM芯片和CPCI2.16技术开发了千兆线速入侵检测系统硬件平台,并基于该平台设计并实现了一个千兆线速级入侵检测系统。该入侵检测系统较之用网络处理器(NP)和专用集成电路(ASIC)技术实现的千兆入侵检测系统具有结构开放、灵活,综合计算能力强,可靠性高等优势。[著者文摘]
文章出处:
《计算机科学》-2008年35卷2期 -75-77页
栏目信息:
Design and Implementation of Kilomega Wirespeed Intrusion Detect System
XU Chen-Jia, CAI Sheng-Wen ,XIE Jun-Yuan, CHEN Shi-Fu (National Laboratory for Novel Software Technology, Nanjing University, Nanjing 210093)
Abstract:
With the popularization of the kilomega wirespeed network, kilomega wirespeed intrusion detect system(ids) becomes necessary. Based on XpeediumTM CXE-16, ppl200, TCAM chip, CPCI 2. 16 technique, we propose a universal hardware platform, and design and implement a kilomega wirespeed intrusion system on the platform. Compared to those system based on NP or ASIC our system is good at structure, flexibility, computation, reliability.[著者文摘]
Key words:
Kilomega, Wirespeed, Intrusion detect system, Network scan detection
基金资助:
本文得到国家自然科学基金(6050302)和江苏省科技厅高技术研究资助项目(BG2005029、BG2006027)资助.

学术















cqvip.com