4 (哈尔滨工业大 学 计算机网络与信息安全技术研究中心,黑龙 江 哈尔 滨 150001) Identifying Hea.pdfVIP

ISSN 1000-9825, CODEN RUXUEW E-mail: jos@ Journal of Software , Vol.18, No.12, December 2007, pp.3060−3070 DOI: 10.1360/jos183060 Tel/Fax: +86-10 © 2007 by Journal of Software . All rights reserved. ∗ 高速网络监控中大流量对象的提取 1,2,3+ 1 4 1,3 王风宇 , 云晓春 , 王晓峰 , 王 勇 1( 中国科学院 计算技术研究所 信息智能与信息安全研究中心,北京 100080) 2( 山东大学 计算机科学与技术学院,济南 250101) 3( 中国科学院 研究生院,北京 100049) 4(哈尔滨工业大学 计算机网络与信息安全技术研究中心,黑龙江 哈尔滨 150001) Identifying Heavy Hitters in High-Speed Network Monitoring 1,2,3+ 1 4 1,3 WANG Feng-Yu , YUN Xiao-Chun , WANG Xiao-Feng , WANG Yong 1(Institute of Computing Technology, The Chinese Academy of Sciences, Beijing 100080, China) 2(School of Computer Science and Technology, Shandong University, Ji’nan 250101, China) 3(Graduate University, The Chinese Academy of Sciences, Beijing 100049, China) 4(Research Center of Computer Network and Information Security Technology, Harbin Institute of Technology, Harbin 150001, China) + Corresponding author: Phn: +86-531 E-mail: wangfengyu@ Wang FY, Yun XC, Wang XF, Wang Y. Identifying heavy hitters in high-speed network monitoring. Journal of Software, 2007,18(12):3060−3070. /1000-9825/18/3060.htm Abstract : Due to the deficiency of traffic measurement capability in high-speed network, it’s valuable for detecting large-scale network security incident to identify heavy hitters precisely in time. An algorithm of identifying heavy hitters based on two-level replacement mechanism is proposed in this paper. In this algorithm, LRU replacement a