摘要:
提出一种以深度包检测(DPI)技术为主、深度流检测(DFI)技术为辅的网络流量检测方法。基于MPC8572网络处理器的模式匹配引擎模块,利用DPI实现细粒度检测,对于DPI的误识别情况,通过DFI进行鉴别并提示重新检测,以达到纠错目的。实验结果表明,联合方法具有检错和纠错功能,且能提高网络流量检测的准确率。
关键词:
深度包检测,
深度流检测,
网络流量检测,
模式匹配引擎
Abstract:
This paper presents a network flow inspection method which combines Deep Packet Inspection(DPI) with Deep Flow Inspection(DFI). DPI fulfills the target of fine-grained at the use of Pattern Match Engine(PME) of the network processor MPC8572. DFI is to notify the underlying false detection that can be caused by DPI and to request for re-detecting. Experimental results show that joint method has the ability of inspection wrong and error correction, and it can improve the accuracy of inspection.
Key words:
Deep Packet Inspection(DPI),
Deep Flow Inspection(DFI),
network flow inspection,
Pattern Match Engine(PME)
中图分类号:
叶文晨, 汪敏, 陈云寰, 张之远. 一种联合DPI和DFI的网络流量检测方法[J]. 计算机工程, 2011, 37(10): 102-104.
XIE Wen-Chen, HONG Min, CHEN Yun-Huan, ZHANG Zhi-Yuan. Network Flow Inspection Method of Joint DPI and DFI[J]. Computer Engineering, 2011, 37(10): 102-104.