基于众核处理器的工控网络入侵检测系统体系架构研究-控制科学与工程专业论文.docxVIP

北京化工大学硕士学位论文该方法通过引入一个对未来网络流量进行预测的沙箱模型来确定最优的 北京化工大学硕士学位论文 该方法通过引入一个对未来网络流量进行预测的沙箱模型来确定最优的 处理器频率调整序列。实验证明，SAFS方法应用于复杂处理器和装备大 量内存的入侵检测设备时，在能量消耗和切换次数两个指标上具有较好的 改进效果。 关键词：入侵检测，众核处理器，移植优化，节能降频 II 万方数据 ABSTRACTRESEARCH ABSTRACT RESEARCH oN INDUSTRIAL CoNTRoL NETWORK INTRUSIoN DETECTIoN SYSTEM ARCHITECTURE BASED oN MANY．CoRE PRoCESSoRS ABSTRACT With the increasing number of security threads for computer control sys- tems，protecting the security of high-speed and multifunctional computer con- trol networks is a severe challenge．However,the traditional hardware imple- ment of security systems like ASIC and FPGA cannot handle the new types of attacks，and the capacity of the normal multicore processors is not suit for mas— sive network traffic．The many-core processors hardware is the possible solu- tion for handing this problem．This thesis is proposed to design and implement the architecture of effective network traffic analyzing for high—speed network using many’core processors． Firstly,we introduce the existing parallel architectures：RTC(Run·-to·-com·- pletion)model and SPL(Software Pipeline)model and evaluate their perfor- mance with online network traffic to find the suitable model for many·-core pro·- cessors．The experiments show that the throughput of SPL model is increasing by 5 5．9％with RTC model with online network traffic． Secondly,we migrate and optimize the NIDS on many—core processors． According to the structure of many—core processors，we design some method to III 万方数据 北京化工大学硕士学位论文improve 北京化工大学硕士学位论文 improve the performance of NIDS，such as the new memory management method．We evaluated its performance with real packet traces．It shows that our system archives up to 1 8Gbps with 4 TILEGX一3 6 CPUs in a 1 U server． Finally,we propose a new method to adjust the frequency ofthe main pro— cessors in IDS devices to reduce energy consumption，which is based on the current traffic flow conditions to predict the future．It calculates optimal fre— quency scaling operation sequen