作者投稿和查稿 主编审稿 专家审稿 编委审稿 远程编辑

计算机工程 ›› 2011, Vol. 37 ›› Issue (10): 102-104. doi: 10.3969/j.issn.1000-3428.2011.10.034

• 网络与通信 • 上一篇    下一篇

一种联合DPI和DFI的网络流量检测方法

叶文晨,汪 敏,陈云寰,张之远   

  1. (上海大学特种光纤与光接入网教育部重点实验室,上海 200072)
  • 出版日期:2011-05-20 发布日期:2011-05-20
  • 作者简介:叶文晨(1986-),男,硕士研究生,主研方向:网络流量检测,嵌入式软件设计;汪 敏,教授;陈云寰、张之远,硕士研究生
  • 基金资助:

    上海市科委科研计划开放课题基金资助项目(095115013 00);上海市重点学科建设基金资助项目(S30108)

Network Flow Inspection Method of Joint DPI and DFI

YE Wen-chen, WANG Min, CHEN Yun-huan, ZHANG Zhi-yuan   

  1. (Key Laboratory of Special Fiber Optics and Optical Access Networks, Ministry of Education, Shanghai University, Shanghai 200072, China)
  • Online:2011-05-20 Published:2011-05-20

摘要:

提出一种以深度包检测(DPI)技术为主、深度流检测(DFI)技术为辅的网络流量检测方法。基于MPC8572网络处理器的模式匹配引擎模块,利用DPI实现细粒度检测,对于DPI的误识别情况,通过DFI进行鉴别并提示重新检测,以达到纠错目的。实验结果表明,联合方法具有检错和纠错功能,且能提高网络流量检测的准确率。

关键词: 深度包检测, 深度流检测, 网络流量检测, 模式匹配引擎

Abstract:

This paper presents a network flow inspection method which combines Deep Packet Inspection(DPI) with Deep Flow Inspection(DFI). DPI fulfills the target of fine-grained at the use of Pattern Match Engine(PME) of the network processor MPC8572. DFI is to notify the underlying false detection that can be caused by DPI and to request for re-detecting. Experimental results show that joint method has the ability of inspection wrong and error correction, and it can improve the accuracy of inspection.

Key words: Deep Packet Inspection(DPI), Deep Flow Inspection(DFI), network flow inspection, Pattern Match Engine(PME)

中图分类号: