基于NDIS中间层的Windows平台下包分类算法的分析-计算机应用技术专业论文.docxVIP

基于 基于 NDIS 中间层的 Windows 平台下包分类算法的研究 第 第 IV 页 Abstract Under the Internet environment widespread application network security technology, such as firewalls, intrusion detection, network monitoring, security auditing, virtual private networks and so on, which are core technologies in order to intercept packets based on packet classification. Packet Classification correctness, accuracy, speed will directly affect the safety performance and efficiency. At present, the existing packet classification algorithms, the one-dimensional, two-dimensional classification algorithms widely used in more mature, and for the multi-dimensional packet classification algorithm is still immature, there are many urgent problems. For example, the speed of packet classification can not meet the demand for high-speed network applications, packet loss widespread phenomenon; data packet classification accuracy to be improved, because of the complexity of the protocol often leads to identification of data packets can not be normal; With the expansion of the rule base, too much memory space can not meet the requirements of low-cost; difficult to update. I based on that Hash function quick search, quick positioning of thinking, propose one based on Hash function five-dollar one-dimensional packet classification algorithm, which is based on the five-byte header classification, but as a result of a comparison operator and a Hash computing, from five down to one-dimensional, and ultimately there is only a rule-base in the IP Address field. Therefore, not only improved the seek rate, but also reduced the storage space, raised the network data package of classification efficiency. And given this algorithm accuracy, the rapid theoretical analysis. This article has analyzed under thoroughly the Windows platform each kind of data packet interception technology, and given the advantages and disadvantages of each. The use of NDIS intermediate driver layer of the intercept data packets, because NDIS interm