摘要： 针对应用层协议处理遇到的问题，提出了一种基于属性标识的缓冲区优化策略。该方法通过减少缓冲区操作的盲目性，可以基本消除各处理模块间缓冲区匹配所引起的数据复制，提高了系统性能；同时，该方法可以支持系统执行期间应用层协议处理通路的动态改变，提高了系统的灵活性。在基于内容的网络安全系统上实现了该方法，证实了方法的有效性。

关键词: 协议栈；网络包检查；零拷贝；缓冲区优化

Abstract: In order to overcome the problems introduced by deep analysis of protocols, this paper proposes an attribute-based buffer optimization method. The proposed method can eliminate almost all data copy when data flows between modules; at the same time, it makes changes of combination of modules online possible. Experiment shows 5%~10% increase of throughput and this validates the proposed method

Key words: Protocol stack; Packet inspect; Zero copy; Buffer optimization