Dissertation > Excellent graduate degree dissertation topics show

Improving Performance of Deep Packet Inspection Based on Pattern Matching

Author: WanZuo
Tutor: ZhongQiuXi
School: National University of Defense Science and Technology
Course: Computer Science and Technology
Keywords: Deep Packet Inspection Intrusion Detection Regular Expression Multi-Pattern Matching pre-filter
CLC: TP393.08
Type: Master's thesis
Year: 2010
Downloads: 52
Quote: 0
Read: Download Dissertation

Abstract


As the key of network intrusion detection and application layer protocol identification, Deep Packet Inspection(DPI) become more and more important to the security of network and information. To improve the performance of DPI based on pattern matching, some new method are presented.The main work and contribution of the thesis include as follows.1. We compare the technology of DPI based on pattern matching, study the design and implementation of Snort’s DPI engine, by do these to show the bottle-neck of the DPI performance implemented by software.2. Based on the study of regular expression matching algorithm, we describe the shortage of it and give a mathod of DPI to accelerate the match of regular expression by hardware. Design a new architecture with pipelining, propose the algorithm of queue management and rules transformation.3. We find the hidden trouble of the pre-filter, when many rules with similar pattern are in the same set, it will lead to the bad result. We introduce a Multi-AC algorithm to filtrate the big set of rules, and get a betterment.4. At last, we implement the two method of improving performance proposed above. Use hardware to accelerate the regular expression matching, and the throughput of Snort achieves a factor of 2.5 improvement over the primary system. Compared to the AC pre-filter algorithm, our Multi-AC algorithm get smaller rule sets, the size of rule set is reduce to 11%~14% of primary one.The result of experiment proves that both of our approaches improve the performance of DPI effectively. Our approaches are carried out in a device, which validate the feasibility and validity, they are very useful in the network project.

Related Dissertations

  1. Intrusion detection based on the ultrasonic echo envelope in the military security patrols,E919
  2. Research on Intrusion Detection Technology of Wireless Sensor Networks Based on Behavior Trust,TP212.9
  3. Association rule mining based Intrusion Detection System Research and Implementation,TP393.08
  4. The Research on Intrusion Detection System Based on Machine Learning,TP393.08
  5. Intrusion Detection in Mobile Ad Hoc Networks: A Timed Finite State Machines Approach,TN929.5
  6. An Intrusion Detection System for High-Speed Networks,TP393.08
  7. Research on the Security in Wireless Sensor Network,TN915.08
  8. The Research and Implementation of An Instant Messenger Monitoring System Based on DPI,TN915.09
  9. Sensitivity Analysis and Application of Orthogonal Weight Function Neural Network,TP183
  10. Zombie control behavior recognition and detection method of,TP393.08
  11. P2P traffic identification system design and research,TP393.02
  12. The Study of Intelligent Intrusion Detection System Based on Neural Network in Linux,TP393.08
  13. Petri net -based network intrusion detection system Research and Implementation,TP393.08
  14. FSVM -based data mining method and its application to intrusion detection research,TP393.08
  15. Ares protocol analysis and traffic detection mechanism,TP393.06
  16. Web-based intrusion detection system logs Design and Implementation,TP393.08
  17. IPv4-IPv6 transition technologies CIDF Based Intrusion Detection System,TP393.08
  18. Intrusion detection based on data mining technology research,TP393.08
  19. Mechanisms based on trust metrics Research and Implementation of Intrusion Detection System,TP393.08
  20. Cloud computing task -dependent mechanism of dynamic parallel scheduling,TP3
  21. Research on Parallel and Distributed Intrusion Detection Technologies,TP393.08

CLC: > Industrial Technology > Automation technology,computer technology > Computing technology,computer technology > Computer applications > Computer network > General issues > Computer Network Security
© 2012 www.DissertationTopic.Net  Mobile