Hish speed deep packet inspection method with low power dissipation

Hish speed deep packet inspection using TCAM faces the problem of high power dissipation.A 2-phase DPI method BF-TCAM was proposed.The first phase used parallel Bloom filters to exclude the normal packets not including attack signatures.The second phase used TCAM to inspect suspicious packets includ...

Full description

Saved in:
Bibliographic Details
Main Authors: ZHU Guo-sheng1, YU Shao-hua1
Format: Article
Language:zho
Published: Editorial Department of Journal on Communications 2011-01-01
Series:Tongxin xuebao
Subjects:
Online Access:http://www.joconline.com.cn/zh/article/74418635/
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1841537114522517504
author ZHU Guo-sheng1
YU Shao-hua1
author_facet ZHU Guo-sheng1
YU Shao-hua1
author_sort ZHU Guo-sheng1
collection DOAJ
description Hish speed deep packet inspection using TCAM faces the problem of high power dissipation.A 2-phase DPI method BF-TCAM was proposed.The first phase used parallel Bloom filters to exclude the normal packets not including attack signatures.The second phase used TCAM to inspect suspicious packets including real attack packets and false positive packets of the first phase.The Bloom filters’ false negative probability is zero and false positive probability is very low.Since most of the network data traffic does not include attack signatures,the method can get high speed deep packet inspection with low power dissipation.
format Article
id doaj-art-3f41f9c8ed33453e9b51450d16627f79
institution Kabale University
issn 1000-436X
language zho
publishDate 2011-01-01
publisher Editorial Department of Journal on Communications
record_format Article
series Tongxin xuebao
spelling doaj-art-3f41f9c8ed33453e9b51450d16627f792025-01-14T08:45:37ZzhoEditorial Department of Journal on CommunicationsTongxin xuebao1000-436X2011-01-013215816574418635Hish speed deep packet inspection method with low power dissipationZHU Guo-sheng1YU Shao-hua1Hish speed deep packet inspection using TCAM faces the problem of high power dissipation.A 2-phase DPI method BF-TCAM was proposed.The first phase used parallel Bloom filters to exclude the normal packets not including attack signatures.The second phase used TCAM to inspect suspicious packets including real attack packets and false positive packets of the first phase.The Bloom filters’ false negative probability is zero and false positive probability is very low.Since most of the network data traffic does not include attack signatures,the method can get high speed deep packet inspection with low power dissipation.http://www.joconline.com.cn/zh/article/74418635/deep packet inspectionTCAMBloom filterpower dissipation
spellingShingle ZHU Guo-sheng1
YU Shao-hua1
Hish speed deep packet inspection method with low power dissipation
Tongxin xuebao
deep packet inspection
TCAM
Bloom filter
power dissipation
title Hish speed deep packet inspection method with low power dissipation
title_full Hish speed deep packet inspection method with low power dissipation
title_fullStr Hish speed deep packet inspection method with low power dissipation
title_full_unstemmed Hish speed deep packet inspection method with low power dissipation
title_short Hish speed deep packet inspection method with low power dissipation
title_sort hish speed deep packet inspection method with low power dissipation
topic deep packet inspection
TCAM
Bloom filter
power dissipation
url http://www.joconline.com.cn/zh/article/74418635/
work_keys_str_mv AT zhuguosheng1 hishspeeddeeppacketinspectionmethodwithlowpowerdissipation
AT yushaohua1 hishspeeddeeppacketinspectionmethodwithlowpowerdissipation