淡江大學機構典藏:Item 987654321/74608
English  |  正體中文  |  简体中文  |  全文笔数/总笔数 : 60861/93638 (65%)
造访人次 : 1112176      在线人数 : 31
RC Version 7.0 © Powered By DSPACE, MIT. Enhanced by NTU Library & TKU Library IR team.
搜寻范围 查询小技巧:
  • 您可在西文检索词汇前后加上"双引号",以获取较精准的检索结果
  • 若欲以作者姓名搜寻,建议至进阶搜寻限定作者字段,可获得较完整数据
  • 进阶搜寻


    jsp.display-item.identifier=請使用永久網址來引用或連結此文件: https://tkuir.lib.tku.edu.tw/dspace/handle/987654321/74608


    题名: PF_RING封包擷取技術的應用
    其它题名: Application of PF_RING packet capturing technology
    作者: 張祐榕;Chang, Yu-Jung
    贡献者: 淡江大學資訊工程學系碩士班
    蔡憶佳;Tsai, Yih-Jia
    关键词: 網路安全;封包擷取;封包過濾;Network security;Packet Capturing;PF_RING;Packet Filtering;Regex
    日期: 2011
    上传时间: 2011-12-28 19:02:20 (UTC+8)
    摘要: 隨著網路速度越來越快,網路安全的技術也必須隨之提昇,以往的網路安全防衛措施如防火牆、入侵偵測系統等都是先讀入封包,確認接收到的封包為正確而未經竄改之後,再對封包作進一步的處理,因此對於高速網路中的封包擷取就非常重要。在高速網路的環境下擷取封包容易產生封包流失現象,因此我們使用了PF_RING這套封包擷取函式庫來改善這個問題。而PF_RING除了封包擷取之外還能透過撰寫外掛程式來進行封包內容過濾,在本研究即利用PF_RING實做出封包過濾系統,並且將PF_RING核心模組中的封包內容比對機制改寫,加入Regex正則表達式比對函式庫,與原先之PF_RING進行效能的比對分析,希望能夠將高速網路下的封包過濾效能更加提昇。經過我們的實驗證實Regex在比對封包內容所花的時間比PF_RING預設之Textsearch字串比對函式庫來得少,且改成Regex後可用Regular Expression來表示Pattern,效率比單純用字串比對來得更好。
    As the network speed becomes faster, network security technology must be more efficient in dealing with high traffic flow. The traditional security measures such as firewalls, intrusion detection systems must confirm the packets are correct and untampered after receiving them from the network, therefore, the efficiency of packet capturing in high speed network is very important. Packet capturing usually cause packet lose, for that reason, we use the PF_RING packet capturing library to improve this problem. In addition to the packet capture, PF_RING can also do the packet content filtering by writing plug-ins. In this study, we use PF_RING to implement a packet filtering system and rewrite the packet content matching mechanism in kernel module of PF_RING. We add the regular expression compared library Regex, compare and analysis with the original performance of the PF_RING, hoping to enhance the performance of packet filtering in high-speed network. Confirmed after the experiment, the time spend of packet content comparing in Regex is less than the Textsearch which defaults in PF_RING, and after using Regex we can write pattern by regular expression, the performance is better than using simple string matching.
    显示于类别:[資訊工程學系暨研究所] 學位論文

    文件中的档案:

    档案 大小格式浏览次数
    index.html0KbHTML310检视/开启

    在機構典藏中所有的数据项都受到原著作权保护.

    TAIR相关文章

    DSpace Software Copyright © 2002-2004  MIT &  Hewlett-Packard  /   Enhanced by   NTU Library & TKU Library IR teams. Copyright ©   - 回馈