基于Petri网模型的UTM防火墙性能分析.PDFVIP

See discussions, stats, and author profiles for this publication at: /publication/235248416 Petri UTM Article January 2008 CITATIONS READS 0 44 5 authors, including: Zhen Chen Tsinghua University 137 PUBLICATIONS 596 CITATIONS SEE PROFILE Some of the authors of this publication are also working on these related projects: Overlay Networks View project Content-Centric Networking View project All content following this page was uploaded by Zhen Chen on 10 April 2014. The user has requested enhancement of the downloaded file. 基于Petri 网模型的UTM 防火墙性能分析 李国栋, 林闯, 陈震, 彭雪海 (清华大学计算机科学与技术系，北京 100084） 摘 要：统一威胁管理设备UTM 是近年来网络安全领域涌现出的一个新的综合性平台，它融合了防火墙、 入侵检测、病毒扫描等安全功能。防火墙模块一般实现在多核网络处理器平台上，负责高速网络收发包、 策略分配等功能，是UTM 中最重要的环节之一。针对UTM 中防火墙的网包处理的两种流程分别建立Petri 网模型，并通过模型求解和在在Cavium OCTEON 5860 多核网络处理器平台上的实验进行了理论与实际性 能分析，结果显示基于会话表的处理流程在满足一定条件下才优于简单顺序处理流程，这对 UTM 的整体 设计有重大的指导意义。 关键词：统一威胁管理；Petri 网；性能分析；防火墙；会话表 中图分类号：TP391.9 文献标识码：A 文章编号：1004-731X (2009) 期数-xxxx-xx Performance Analysis of Firewall Module in UTM Based on Petri Net Models Li Guo-dong，Lin Chuang, Chen Zhen, Peng Xue-hai (Computer Science and Technology Department, Tsinghua University, Beijing, 10084) Abstract ：Unified Threat Management (UTM) as a novel integrated platform, which combines firewall, intrusion detection, virus scanning and other security features, have emerged in network security area in recent years. A critical module in UTM system is. Firewall module ，which is responsible for high-spe