计算机应用 ›› 2005, Vol. 25 ›› Issue (05): 1141-1144.DOI: 10.3724/SP.J.1087.2005.1141

• 信息安全 • 上一篇    下一篇

利用对称多处理器提高NIDS的性能

赖海光1,2，黄皓1，谢俊元1   

  1. 1. 南京大学计算机科学与技术系； 2.解放军理工大学指挥自动化学院
  • 出版日期:2005-05-01 发布日期:2005-05-25

Improving the performance of NIDS using symmetric multi-processor

LAI Hai-guang1, 2, HUANG Hao1, XIE Jun-yuan1   

  1. 1. Department of Computer Science and Technology, Nanjing University, Nanjing Jiangsu 210093, China; 2. Institute of Command Automation, PLA University of Science and Technology, Nanjing Jiangsu 210007, China
  • Online:2005-05-01 Published:2005-05-25

PDF

摘要： 网络入侵检测系统(NIDS)通过捕获和分析网络数据包判断是否存在攻击行为。由于网络带宽越来越高,NIDS的处理能力越来越难以跟上网络的速度。该文提出了一种利用对称多处理器(SMP)提高NIDS处理能力的方法,通过多个CPU并行的处理网络数据包改善系统的性能。经过对NIDS处理过程的分析,设计了一种有效的并行处理结构,保证在不同CPU上运行的线程能够高度并行的执行。此外,该文提出的线程同步方式既保证了程序功能的正确,又避免了对共享资源的互斥访问,进一步提高了线程的并行度。实验证明,在具有双CPU的SMP结构上实现的NIDS的性能比单CPU系统提高了80%。

关键词: 入侵检测, 对称多处理器, 并行处理

Abstract: Network-based intrusion detection system (NIDS) detects attacks by capturing and analyzing network packets. As network band increases, NIDS can hardly keep up with the speed of networks. A method of improving NIDS’ process ability using symmetric multi-processor (SMP) was proposed in the paper. Several CPUs of the system were used to process network packets in parallel to improve the performance. After analyzing NIDS’ process procedure, an effective parallel processing structure was devised, which guaranteed threads on different CPUs running in parallel. Moreover, the synchronization method of threads proposed avoided the mutually exclusive access to the shared resource, which further increased the parallelity of threads, and guaranteed the correctness of the functionality of the program. Experiments show that the NIDS implemented on a SMP system with dual CPUs is almost 80% faster than the one based on a system with unique CPU.

Key words: intrusion detection, SMP, parallel processing

中图分类号: 

版权所有 © 2021 四川计算机应用杂志社有限公司
蜀ICP备 05010208 号-3　新出网证(川)字026号
技术支持：北京玛格泰克科技发展有限公司
访问总数：
今日访问：