Dissertation > Excellent graduate degree dissertation topics show
Research and Implementation of Dynamic and Configurable On-line Filtering Technology Based on NetFPGA
Author: KongYu
Tutor: YangBo
School: Jinan University
Course: Computer System Architecture
Keywords: Packet filtering State detection Content inspection FPGA
CLC: TP393.08
Type: Master's thesis
Year: 2011
Downloads: 46
Quote: 0
Read: Download Dissertation
Abstract
|
With the rapid development of network technology , more and more information is transmitted over the Internet , information sharing has become the development trend of today 's networked society , people enjoy the network of information sharing , but also had to face some Internet and breeding the distress caused by viruses, network attacks and other illegal means , the firewall have come into being . Improve network bandwidth , the diversification of network applications and attacks to the firewall serious challenges to the traditional single packet filtering the the state detection software firewall has far short of needs , become performance bottlenecks and functional single the challenge of network security . This paper first introduces the current security filtering system , analysis of the pros and cons of the various security filter architecture , high performance and flexibility embodied in the network processing on FPGA (Field-Programmable Gate Array) , a Based on NetFPGA dynamic configuration online filtration system. Followed by brief framework of the overall design of the system , and then details the methods and processes of each module of the system implementation , concluded the entire design process and propose areas for improvement . In this paper, FPGA implementation of packet filtering and stateful inspection firewall , the traditional detection state table space , a new storage status table method , the amount of space occupied by far less than the traditional state detection ; realized by FPGA part of the snort rules , the reference computer RISC (Reduced Instruction Set Computer) instruction set thinking, snort rules classify statistics extracted centralized rules field rules , design content detection template , and then use the hardware implementation of other rules software implementation . Packet filtering to provide on the the header static filtering , state , and content inspection to provide the payload motion detection , to detect and report the phenomenon of abnormal or unauthorized network system , a move a quiet , complement each other . The same time , both parallel matching string matching method , 30 parallel matching rules , content inspection acceleration matching ; with RAW Socket programming , remote configuration stored in NetFPGA filtering rules . This paper systematically from the hardware and software implementation , algorithm design to complete research on dynamically configurable online filtering technology .
|
Related Dissertations
- Research on Electromagnetic Acoustic Transducer Detection System Based on FPGA,TH878.2
- Study on Drive and Control System of Five-Phase PMSM Based on FPGA,TM341
- Development of LXI Arbitrary Waveform Generator,TM935
- Design of Digital Predistorter for RF Power Amplifier Based on FPGA,TN722.75
- Synchronization and Channel Estimation Algorithm in Bursted OFDM System and Its Implementation on FPGA,TN919.3
- Performance Analysis of Anti-Multipath Capability in DSSS System and Study on the Compensation Methods,TN914.42
- Optimizing and Realising Research on Vedio Compression in TV Guidance System,TN919.81
- Research and Hardware Simulation of Multiuser Spread Spectrum Code Acquisition Based on FPGA,TN914.42
- Research on Basic Algorithms of Digital Image Processing and Implementation with FPGA,TP391.41
- Research of High Speed Image Pre-processing System Based on FPGA,TP391.41
- Design of High-Speed Digital Image Acquisition and Interface Based on FPGA,TP274.2
- Development of Inductance Sensor Data Acquisition System Based on FPGA,TP274.2
- Development of Serial Bus Analyzer Based on Nios,TP274
- Development of PMC High-speed Data Transmission Board Design Based on FPGA-RocketIO_X,TP274.2
- Development of Pxibus High Performance Digital I/O Module,TP274
- Development of LXI Counter,TP274
- A High-Speed and Real-Time Data Acquisition System Based on FPGA,TP274.2
- Design of GPS Information Receiving System Based on Nios Ⅱ,TN967.1
- Temperature and pressure explosives temperature field memory test technology,TQ560.7
- Erbium-doped fiber amplifier pump laser drive source research applications,TN248
- Remote FPGA system design and implementation of security upgrades,TP309
CLC: > Industrial Technology > Automation technology,computer technology > Computing technology,computer technology > Computer applications > Computer network > General issues > Computer Network Security
© 2012 www.DissertationTopic.Net Mobile
|