Dissertation > Excellent graduate degree dissertation topics show

Research and Design of Linked IPS for IPv6 Based on Multi-core Network Processor

Author: YangJi
Tutor: LuJianDe
School: Suzhou University
Course: Applied Computer Technology
Keywords: Octeon multi-core IPv6 IPS linking
CLC: TP393.04
Type: Master's thesis
Year: 2011
Downloads: 38
Quote: 1
Read: Download Dissertation

Abstract


At present, the new generation network has higher bandwidth, smaller communication delay and larger throughput than ever before, and the campus backbone has its transmission rate increased to Gbps or even 10Gbps level. The traditional network intrusion detection and prevention system (NIDS/NIPS) distributed in the campus backbone are more and more difficult to deploy because of their less processing power to keep up with the speed of modern networks, and the single-CPU based platform has gone to its road end. On the other hand, the new generation network will adopt IPv6 protocol. Besides the security threatens involved in IPv4, some new security problems are introduced in IPv6 network. In order to satisfy the requirements of high speed, high performance, and high efficiency for NIDS/NIPS in the new generation network, the network multi-core platform should be studied and employed to improve the processing power.Firstly, this thesis reviews the development state of research and deployment in the field of IPv6 network and multi-core processor at home and abroad, then analyzes and researches the architecture, hardware units and programming of Octeon multi-core network processor, including the simple executive Hardware Abstraction Layer (HAL) and the architecture model of software and hardware. Moreover, it analyzes the new security problems introuduced by IPv6 network, and discusses the advantage and feasibility adopting Octeon multi-core high-speed network processing architecture to implement the IPS for new generation IPv6 network.The paper has made research on the Linked Intrusion Prevention System based on Octeon multi-core high-speed network processor for new generation IPv6 network, and has designed its prototype. The system design is based on high-speed processing on Octeon multi-core, and considers new intrusion characteristics occurring in IPv6 network. On the basis of the technique of matching rules in rule library for intrusion detection, and using the new protocol analysis and flow-based detection techniques, the different executions including control plane and data plane are distributed on multiple cores of Octeon. Adopting the mechanism of named blocks to communicate between multiple cores, and by means of the feedbacks from the cores running data plane code to the control plane core, the system has realized the high-speed linking between the flow processing, protocol analysis module and the control module.The paper has elaborated on the system analysis and overall design, the design of flow processing module, protocol analysis module and control module. It introduces the key technique used in the system, and discusses the measures and methods used to maximize the multi-core parallel processing in the system. At last, the thesis has built the experimental platform with IXIA tester to simulate the real IPv6 network environment, and has completed the test in the functionality and performance.

Related Dissertations

  1. Reseach of Mobile IP Routing in Satellite Networks,TN929.5
  2. The Research and Application of IPTV Terminal System Based on the Next Generation of Internet,TN949.292
  3. Research on Algorithm of Parallel Copying Garbage Collection Based on Lisp 2 for Multicore System,TP332
  4. Existence to Solutions for 4th-order Differential Equation Dirichlet Boundary Value Problems,O175.8
  5. The Research and Application of the Transmission and Distribution for Multiple-Concurrent Flows Based on IPv6,TN949.292
  6. The Design and Implementation of GTP-U Traffic Monitoring Module for GTP_IPS,TN929.5
  7. Research and Implementation of Data Parallel Programming Platform Based on Multi-Core,TP332
  8. Preparation and properties of silicone modified waterborne polyurethane coating agent,TS195.2
  9. One Kind of Active Defense System Model Research Based on Honeypot Technology,TP393.08
  10. Mobile IPv6 Switching Optimization and Performance Research,TN915.04
  11. Research on Expanded Techniques of Mobile IP Bashed on NS2,TN929.5
  12. Routing Technology Research for Application-layer Multicast of Overlay Network Based on IPv6 Environment,TP393.02
  13. Existence of Solutions for the p-Laplacian Equations with a Hardy-Sobolev Operator,O175.25
  14. The Research of Mobile IPv6 Handover Technology,TP393.04
  15. The Research of SIP Signaling Compression Technology Based on IPS,TN929.5
  16. Research and Application of Electrical Data Dedicated Network Based on IPv6 Technology,TN915.853
  17. Research on high-speed IPv6 IPsec security gateway,TP393.08
  18. Vehicle information systems design and implementation of server-side,TP311.52
  19. Implementation and Research on Radio Link Control Protocol in TD-SCDMA,TN929.533
  20. The Research on A Scheduling Algorithm for Real-time Tasks in Multi-core Systems,TP332
  21. A Study of Amdahl’s Law Performance Model on Asymmetric Multicore System,TP338.6

CLC: > Industrial Technology > Automation technology,computer technology > Computing technology,computer technology > Computer applications > Computer network > General issues > Communication protocols, communication protocols
© 2012 www.DissertationTopic.Net  Mobile