关键词: 深度数据包检测, 规则集, 多核平台, 计数式Bloom过滤器, 并行Bloom过滤器组

Abstract: The traditional methods for hardware/softwarebased Deep Packet Inspection (DPI) have intrinsic limitations in practical implementation. To address the shortcomings, this paper presented a DPI algorithm implemented on the multicore platform based on the parallel Bloom filters. Firstly, the algorithm grouped the rule sets according to their lengths and constructed a set of counting Bloom filters to represent the grouped rule sets. Each Bloom filter stood for a rule set with a specific length. Secondly, efficient hash functions were introduced to reduce the collision probability and the computing complexity. Lastly, the algorithm was implemented using the parallel programming method based on the parallel processing ability of the multicore platform. The theoretic analysis and experimental results show that the proposed algorithm is time and space efficient.

Key words: deep packet inspection, rule set, multicore platform, Counting Bloom Filter (CBF), parallel Bloom filters