作者投稿和查稿 主编审稿 专家审稿 编委审稿 远程编辑

计算机工程 ›› 2011, Vol. 37 ›› Issue (16): 94-97. doi: 10.3969/j.issn.1000-3428.2011.16.032

• 网络与通信 • 上一篇    下一篇

IP流检测中基于信息熵的哈希算法改进

刘许刚,马 宏   

  1. (国家数字交换系统工程技术研究中心,郑州 450002)
  • 收稿日期:2011-03-04 出版日期:2011-08-20 发布日期:2011-08-20
  • 作者简介:刘许刚(1984-),男,硕士研究生,主研方向:电信网信息关防,报文分类;马 宏,副教授
  • 基金资助:
    国家“863”计划基金资助重点项目(2008AA011002)

Improvement of Hash Algorithm Based on Information Entropy in IP Flow Detection

LIU Xu-gang, MA Hong   

  1. (National Digital Switching System Engineering & Technological R&D Center, Zhengzhou 450002, China)
  • Received:2011-03-04 Online:2011-08-20 Published:2011-08-20

摘要: 介绍流检测中常见的哈希算法,从信息熵的角度分析异或移位(XOR-SHIFT)算法。将异或运算扩展到字节,利用区域网络检测中数据包IP地址低字节比高字节变化频繁的特点,通过对称交叉异或运算,将五元组中的信息量尽可能更大化地表现在哈希值中,从而优化哈希算法的散列性能,使后续以流标识为约束进行的IP流处理更高效。

关键词: 哈希, 异或移位, 熵, 对称交叉异或

Abstract: This paper refers to several hash algorithms in IP flow detection, and analyzes XOR-SHIFT algorithm using the theory of entropy chiefly. XOR operation is extended to bytes, which can get much more random value from five-tuple because of difference between high byte and low byte of IP address in paceket. As a result, better performance comes into being in hash algorithm, which helps dealing with IP flows conveniently according to flow identifiers.

Key words: hash, XOR-SHIFT, entropy, Symmetry Cross XOR(SC-XOR)

中图分类号: