簡易檢索 / 詳目顯示

研究生: 蘇正建
Su, Cheng-Chien
論文名稱: 高效能的封包處理平行架構
Efficient Parallel Architecture for Packet Processing with Hardware Support
指導教授: 張燕光
Chang, Yeim-Kuan
學位類別: 博士
Doctor
系所名稱: 電機資訊學院 - 資訊工程學系
Department of Computer Science and Information Engineering
論文出版年: 2011
畢業學年度: 99
語文別: 英文
論文頁數: 91
中文關鍵詞: 路由表查詢封包分類深度封包檢測三元內容定址記憶體
外文關鍵詞: IP Lookup, Packet classification, Deep packet inspection, TCAM
相關次數: 點閱:115下載:2
分享至:
查詢本校圖書館目錄 查詢臺灣博碩士論文知識加值系統 勘誤回報
  • 今日,高速網際網路的實現,爆炸性成長的網路流量需要高速的路由器來支援。交換器及路由器需要提供網路封包傳輸,服務質量,入侵偵測等功能才能應付大量的網際網路應用程式。高性能的網路裝置為了能夠處理這些封包通常會有三個重要的技術,包含封包傳送,封包分類,深層封包檢測。傳統的網路設備都是通用處理器架構再利用軟體演算法去提供這三個重要的技術。但封包的大量成長使用傳統的路由器所提供的流量是不夠理想的。為了滿足大量的封包處理目前最使用的架構是平行化的封包處理架構。平行化的封包處理架構通常使用多核心網路處理器、元件可程式邏輯閘陣列和三位元內容定址記憶體。
    本論文著重在使用元件可程式邏輯閘陣列和三位元內容定址記憶體提供一個平行處理封包的架構。FPGA 提供了可程式化的硬體平台,可以在上面發展平行化的封包處理架構。TCAM 是一種特殊的記憶體,它可以提供了平行搜尋的能力,只需要一次的系統週期內即可平行比對完成TCAM 內的所有資料。FPGA 和TCAM 有可以平行比對、容易使用及快速處理的優點,然而,它們的售價卻是昂貴的。在論文中我們針對封包分類及深層封包檢測提出了一個平行處理的架構並實作在FPGA 的平台上。我們所提的架構可以有效率的使用FPGA 內的邏輯元件,且在封包分類上可以達到超過100Gbps,在深度封包檢測上達到7.27Gpbs 的傳輸速率。在TCAM 上,我們找到了一個壓縮TCAM 資料的新方法,比之前的相關壓縮方法更能夠節省TCAM 空間。最後我們也提供一個在封包傳送時可同時使用多顆TCAM 的平行架構,改善了只單顆TCAM 搜尋的速度。

    In today's era of high-speed Internet, explosive traffic growth requires the support of high-performance switches and routers. Switches and routers provide the functionalities of packet switching, quality service differentiation, and network security for managing various Internet applications. High-performance network devices for dealing with these packets typically require three important technologies: packet forwarding, packet classification, and deep packet inspection. Traditional network devices use general-purpose processor architectures and software algorithms to procure these three technologies. However, the massive growth of packet traffic renders traditional network devices dissatisfactory. Often, parallel architectures provide feasible solutions for processing packets in massive quantities. Parallel packet processing architectures typically use multi-core network processors, field programmable gate arrays (FPGAs), and ternary content addressable memory (TCAM) for implementation. In this thesis, we focus on FPGA and TCAM to support efficient parallel packet processing. FPGA offers a programmable hardware platform that can develop a parallel packet processing architecture. TCAM is a special memory that can compare in parallel input data with all entries of TCAM in one lookup time. FPGA and TCAM offer the advantages of a high degree of parallelism, easy configuration, and fast processing time. Nevertheless, these are expensive hardware devices. In this thesis, we propose two parallel architectures for packet classification and deep packet inspection, and implement them in FPGA. Our architectures efficiently use the logic cell of FPGA, achieving throughput of over 100 Gbps and 7.27 Gbps for packet classification and deep packet inspection, respectively. We present TCAM compression schemes for packet classification and deep packet inspection. Our proposed compression schemes significantly reduce the number of TCAM entries, allowing TCAM to store a greater amount of data compared with a previous work. Finally, we propose a parallel multiple TCAM architecture for packet forwarding, which can further improve the single TCAM architecture.

    Chapter 1 Introduction.................................................................... 1 Chapter 2 Background...................................................................... 4 2.1 Packet Forwarding Problem Statement................................................... 4 2.2 Packet Classification Problem Statement............................................... 6 2.3 Deep Packet Inspection Problem Statement.............................................. 6 2.4 Field Programmable Gate Array ........................................................ 8 2.5 Ternary Content Addressable Memory (TCAM)............................................. 9 Chapter 3 Design Contention Resolver for TCAM-based Parallel Architecture ................11 3.1 Introduction .........................................................................11 3.2 Proposed Contention Resolver Design...................................................14 Chapter 4 Efficient TCAM Encoding Schemes for Packet Classification using the Gray Code...16 4.1 Introduction .........................................................................16 4.2 Preliminaries and Related Work........................................................19 4.2.1 Direct range-to-prefix conversion ..................................................20 4.2.2 Elementary interval-based encoding scheme ..........................................20 4.2.3 Parallel packet classification encoding (PPCE) scheme ..............................21 4.3 Proposed Range Encoding Schemes ......................................................23 4.3.1 Elementary interval and BRGC-based range encoding...................................24 4.3.2 Enhancing PPCE with BRGC ...........................................................24 4.3.3 Many-to-one code assignment ........................................................29 4.3.4 One-to-many code assignment ........................................................29 4.4 Performance Evaluation ...............................................................30 4.5 Conclusions ..........................................................................32 Chapter 5 High-speed and Memory-efficient Pipeline Architecture for Packet Classification.33 5.1 Introduction .........................................................................33 5.2 Related Work..........................................................................34 5.3 Proposed Schemes......................................................................36 5.3.1 Set Pruning Multi-bit Trie .........................................................37 5.3.2 Partitioning by Wildcards (PW) .....................................................38 5.3.3 Partitioning by Lengths (PL)........................................................39 5.4 Implementation........................................................................41 5.5 Performance ..........................................................................43 5.6 Conclusion............................................................................44 Chapter 6 Cost-effective Pre-processing-based NFA Pattern Matching Architecture for NIDS..45 6.1 Introduction .........................................................................45 6.2 Related Work..........................................................................46 6.3 Proposed Scheme ......................................................................50 6.4 Proposed Architecture in FPGA.........................................................53 6.4.1 Detailed Design of the Pre-process Module...........................................55 6.4.2 False Positive of the Pro-process Module ...........................................57 6.5 Performance Evaluation ...............................................................59 6.6 Conclusion............................................................................62 Chapter 7 Efficient Deterministic Finite Automata in TCAM for Deep Packet Inspection......63 7.1 Introduction .........................................................................63 7.2 Related Work..........................................................................64 7.2.1 Famous Software-based Approaches ...................................................64 7.2.2 Deterministic Finite Automaton .....................................................65 7.2.3 Ternary String and TCAM-based Solutions ............................................67 7.3 Proposed DFA in TCAM..................................................................68 7.3.1 Motivation .........................................................................68 7.3.2 Problem Statement and Preliminaries ................................................69 7.3.3 Group DFA states ...................................................................71 7.3.4 Independent Symbol Encoding (ISE) Scheme ...........................................71 7.3.5 Disjoint Set Encoding (DSE) Scheme..................................................74 7.4 Performance Evaluation ...............................................................77 7.5 Conclusion............................................................................78 Chapter 8 Conclusions and Future Work ....................................................79 References ...............................................................................82 Publication Lists ........................................................................90

    [1] A. V. Aho and M. J. Corasick, 「Efficient String Matching: an Aid to Bibliography Search,」 Comm. of the ACM, vol. 18, no.6, pp.333-340, 1975.
    [2] M. Akhbarizadeh, M. Nourani, R. Panigrahy and S. Sharma, 「A TCAM-Based Parallel Architecture for High-Speed Packet Forwarding,」 IEEE Trans. on Computers, vol. 56, no. 1, pp. 58-72, Jan. 2007.
    [3] M. Alicherry, M. Muthuprasanna, and V. Kumar, 「High Speed Pattern Matching for Network IDS/IPS,」 Proc. IEEE ICNP, pp.187-196, 2006.
    [4] I. Arsovski, T. Chandler, and A. Sheikholeslami, 「A Ternary Content-Addressable Memory (TCAM) Based on 4T Static Storage and Including a Current-Race Sensing Scheme,」 IEEE J. Solid-State Circuits, vol. 38, no. 1, pp. 155-158, Jan. 2003.
    [5] Z. K. Baker and V. K. Prasanna, 「A Computationally Efficient Engine for Flexible Intrusion Detection,」 IEEE Trans. Very Large Scale Integr. (VLSI) Syst., vol. 13, no. 10, pp. 1179-1189, Oct. 2005.
    [6] M. Becchi and S. Cadambi, 「Memory-Efficient Regular Expression Search Using State Merging,」 Proc. IEEE INFOCOM, pp.1064-1072, 2007.
    [7] M. Becchi and P. Crowley, 「A Hybrid Finite Automaton for Practical Deep Packet Inspection,」 Proc. ACM CoNEXT, pp. 1-12, 2007.
    [8] M. Becchi and P. Crowley, 「An Improved Algorithm to Accelerate Regular Expression Evaluation,」 Proc. ACM/IEEE ANCS, pp.145-154, 2007.
    [9] M. Becchi and P. Crowley, 「Extending Finite Automata to Efficiently Match Perl-Compatible Regular Expressions,」 Proc. ACM CoNEXT, pp. 1-12, 2008.
    [10] M. Becchi and P. Crowley, 「Efficient Regular Expression Evaluation: Theory to Practice,」 Proc. ACM/IEEE ANCS, pp. 50-59, 2008.
    [11] M. D. Berg, M.V. Kreveld, M. Overmars, and O. Schwarzkopf, Computational Geometry: Algorithms and Applications. Springer Verlag, 1997.
    [12] R. S. Boyer and J. S. Moore, 「A Fast String Searching Algorithm,」 Comm. of the ACM, vol.20, no. 10, pp. 762-772, 1977.
    [13] A. Bremler-Barr, D. Hay, and Y. Koral, 「CompactDFA: Generic State Machine Compression for Scalable Pattern Matching,」 Proc. IEEE INFOCOM, pp. 1-9, 2010.
    [14] B. C. Brodie, R. K. Cytron, and D. E. Taylor 「A Scalable Architecture for High-Throughput Regular-Expression Pattern Matching,」 Proc. IEEE ISCA, pp. 191-202, 2006.
    [15] L. Buchsbaum, G. S. Fowler, B. Krishnamurthy, K.-P. Vo, and J. Wang, 「Fast Prefix Matching of Bounded Strings,」 ACM Journal of Experimental Algorithmics, vol. 8, pp.1-17, 2004.
    [16] Y.-K. Chang, 「Power-Efficient TCAM Partitioning for IP Lookups with Incremental Updates,」 Lecture Notes in Computer Science, vol. 3391, pp. 531-540, Jan. 2005.
    [17] Y.-K. Chang, 「A 2-Level TCAM Architecture for Ranges」, IEEE Trans. on Computers, vol. 55, no. 12, pp. 1614-1629, Dec. 2006.
    [18] Y.-K. Chang, C.-C. Su, 「Efficient TCAM Encoding Schemes for Packet Classification using Gray Code,」 Proc. IEEE GLOBECOM, pp. 1834-1839, 2007.
    [19] Y.-K. Chang, M.-L. Tsai, C.-C. Su, 「Improved TCAM-based Pre-Filtering for Network Intrusion Detection Systems,」 Proc. IEEE AINA, pp. 985-990, 2008.
    [20] Y.-K. Chang, C.-C. Su, 「Comments on 「A TCAM-Based Parallel Architecture for High-Speed Packet Forwarding」,」 IEEE Trans. on Computers, vol. 57, no. 4, pp. 574-576, Apr. 2008.
    [21] Y.-K. Chang, M.-L. Tsai and Y.-R. Chung, 「Multi-Character Processor Array for Pattern Matching in Network Intrusion Detection System,」 Proc. IEEE AINA, pp. 991-996, 2008.
    [22] Y.-K. Chang, 「Efficient Multidimensional Packet Classification with Fast Updates,」 IEEE Trans. on Computers, Vol. 58, No. 4, pp. 463-479, Apr. 2009.
    [23] Y.-K. Chang, Y.-C. Liu, and F.-C. Kuo, 「A Pipeline IP Forwarding Engine with Fast Update,」 Proc. IEEE AINA, pp. 263-269, 2009.
    [24] Y.-K. Chang, Y.-C. Lin, and K.-Y. Ho, 「Update-aware Controlled Prefix Expansion for Fast IP Lookups,」 Proc. IEEE HPSR, pp. 1-6, 2009.
    [25] Y.-K. Chang, Y.-C. Lin, and C.-C. Su, 「Dynamic Multiway Segment Tree for IP Lookups and the Fast Pipelined Search Engine,」 IEEE Trans. on Computers, vol. 59, no. 4, pp. 492-506, Apr. 2010.
    [26] Y.-K. Chang, C.-R. Chang, and C.-C. Su, 「The Cost Effective Pre-Processing based NFA Pattern Matching Architecture for NIDS,」 Proc. IEEE AINA, pp. 385-391, 2010.
    [27] Y.-K. Chang, Y.-S. Lin, and C.-C. Su, 「A High-Speed and Memory Efficient Pipeline Architecture for Packet Classification,」 Proc. IEEE FCCM, pp. 215-218, 2010.
    [28] H. J. Chao, 「Next Generation Routers,」 Proceeding of the IEEE, vol. 90, no. 9, pp. 1518-1558, Sept. 2002.
    [29] Y. H. Cho and W.H. Mangione-Smith, 「Deep Packet Filter with Dedicated Logic and Read Only Memories,」 Proc. IEEE FCCM, pp. 125-134, 2004.
    [30] Clam Anti-Virus signature database, www.clamav.net.
    [31] C. R. Clark and D. E. Schimmel, 「Scalable Pattern Matching for High Speed Networks,」 Proc. IEEE FCCM, pp. 249-257, 2004.
    [32] S. Dharmapurikar, H. Song, J. Turner, and J. Lockwood, 「Fast Packet Classification Using Bloom Filters,」 Proc. ACM/IEEE ANCS, pp. 61-70, 2006.
    [33] W. Eathertom, G. Varghese, and Z. Dittia, 「Tree Bitmap: Hardware/Software IP Lookups with Incremental Updates,」 ACM SIGCOMM Computer Communication Review, vol. 34, no. 2, pp. 97-122, Apr. 2004.
    [34] M. Gao, K. Zhang, and J. Lu, 「Efficient Packet Matching for Gigabit Network Intrusion Detection using TCAMs,」 Proc. IEEE AINA, pp. 249-254, 2006.
    [35] P. Gupta and N. McKeown, 「Packet Classification on Multiple Fields,」 ACM SIGCOMM Computer Communication Review, vol. 29, pp. 147-160, Oct. 1999.
    [36] P. Gupta and N. McKeown, 「Algorithms for Packet Classification,」 IEEE Network, vol. 15, no. 1, pp. 24-32, Mar.-Apr. 2001.
    [37] C. L. Hayes and Y. Luo, 「DPICO: A High Speed Deep Packet Inspection Engine Using Compact Finite Automata,」 Proc. ACM/IEEE ANCS, pp. 195-203, 2007.
    [38] B. L. Hutchings, R. Franklin, and D. Carver, 「Assisting Network Intrusion Detection with Reconfigurable Hardware,」 Proc. IEEE FCCM, pp. 111-120, 2002.
    [39] B. Jiang and B. Liu, 「High-Speed Discrete Content Sensitive Pattern Match Algorithm for Deep Packet Filtering,」 Proc. IEEE ICCNMC, pp. 149-156, 2003.
    [40] W. Jiang and V. K. Prasanna, 「Large-Scale Wire-Speed Packet Classification on FPGAs,」 Proc. ACM/SIGDA FPGA, pp. 219-228, 2009.
    [41] W. Jiang and V. K. Prasanna, 「Parallel IP Lookup using Multiple SRAM-based Pipelines,」 Proc. IEEE IPDPS, pp. 1-14, 2008.
    [42] W. Jiang and V. K. Prasanna, 「A Memory-Balanced Linear Pipeline Architecture for Trie-Based IP Lookup,」 Proc. IEEE HOTI, pp. 83-90, 2007.
    [43] H.-J. Jung, Z. K. Baker, and V. K. Prasanna, 「Performance of FPGA Implementation of Bit-Split Architecture for Intrusion Detection Systems,」 Proc. IEEE IPDPS, pp. 1-8, 2006.
    [44] T. Lakshman and D. Stiliadis, 「High-Speed Policy-Based Packet Forwarding Using Efficient Multi-Dimensional Range Matching,」 ACM SIGCOMM Computer Communication Review, vol. 28, no. 4, pp. 203-214, Oct. 1998.
    [45] C.-H. Lin, Y.-T. Tai, and S.-C. Chang, 「Optimization of Pattern Matching Algorithm for Memory Based Architecture,」 Proc. ACM/IEEE ANCS, pp.11-16, 2007.
    [46] C.-H. Lin, C.-T. Huang, C.-P. Jiang, and S.-C. Chang, 「Optimization of Pattern Matching Circuits for Regular Expression on FPGA," IEEE Trans. on Very Large Scale Integration Systems, vol. 15, no. 12, pp. 1303-1310, Dec. 2007.
    [47] C.-H. Lin and S.-C. Chang, 「Efficient Pattern Matching Algorithm for Memory Architecture,」 IEEE Trans. Very Large Scale Integration Systems, 2009.
    [48] H. Liu, 「Efficient Mapping of Range Classifier into Ternary-CAM,」 Proc. IEEE HOTI, pp.95-100, 2002.
    [49] Y. Liu, Y. Yang, P. Liu, and J. Tan, 「A Table Compression Method for Extended Aho-Corasick Automaton,」 Proc. Springer-Verlag CIAA, pp.84-93, 2009.
    [50] J. V. Lunteren and T. Engbersen, 「Fast and Scalable Packet Classification,」 IEEE J. Sel. Areas Commun., vol. 21, no. 4, pp. 560-571, May 2003.
    [51] J. V. Lunteren, 「High-Performance Pattern-Matching for Intrusion Detection,」 Proc. IEEE INFOCOM, pp. 1-13, 2006.
    [52] A. Kennedy, X. Wang, Z. Liu, and B. Liu, 「Low Power Architecture for High Speed Packet Classification,」 Proc. ACM/IEEE ANCS, pp. 131-140, 2008.
    [53] D. Knuth, J. H. Morris, and V. Pratt, 「Fast Pattern Matching in Strings,」 SIAM J. Comput., vol. 6, no. 2, pp. 323-350, 1977.
    [54] S. Kumar, S. Dharmapurikar, F. Yu, P. Crowley, and J. Turner, 「Algorithms to Accelerate Multiple Regular Expressions Matching for Deep Packet Inspection,」 Proc. ACM SIGCOMM, pp. 339-350, 2006.
    [55] N. Mohan and, M. Sachdev, 「Low Power Dual Matchline Ternary Content Addressable Memory,」 Proc. IEEE ISCAS, pp. 633-636, 2004.
    [56] R. Nidhu and V. K. Prasanna, 「Fast Regular Expression Matching Using FPGAs,」 Proc. IEEE FCCM, pp. 227-238, 2001.
    [57] A. Nikitakis and I. Papaefstathiou, 「A Memory-Efficient FPGA-Based Classification Engine,」 Proc. IEEE FCCM, pp. 53-62, 2008.
    [58] M. Norton, 「Optimizing Pattern Matching for Intrusion Detection,」 White paper, Sourcefire Inc, 2004.
    [59] I. Papaefstathiou and V. Papaefstathiou, 「Memory-Efficient 5D Packet Classification at 40 Gbps,」 Proc. IEEE INFOCOM, pp. 1370-1378, 2007.
    [60] P. Piyachon and Y. Luo, 「Compact State Machines for High Performance Pattern Matching,」 Proc. ACM/IEEE DAC, pp. 493-496, 2007.
    [61] P. Piyachon and Y. Luo, 「Design Of High Performance Pattern Matching Engine Through Compact Deterministic Finite Automata,」 Proc. ACM/IEEE DAC, pp. 852-857, 2008.
    [62] E. M. Reingold, J. Nievergelt. and N. Deo, Combinatorial Algorithms, Englewuod Cliffs, NJ: Prentice-Hall, 1977.
    [63] Renesas, 「R8A20410BG 20Mbit Quad-Search Content Addressable Memory CAM,」 http://www.renesas.com, Jan. 2010.
    [64] S. Singh, F. Baboescu, G. Varghese, and J. Wang, 「Packet Classification Using Multidimensional Cutting,」 Proc. ACM SIGCOMM, pp. 213-224, 2003.
    [65] Snort: The Open Source Network Intrusion Detection System, http://www.snort.org/
    [66] H. Song and J. W. Lockwood, 「Efficient Packet Classification for Network Intrusion Detection Using FPGA,」 Proc. ACM/SIGDA FPGA, pp. 238-245, 2005.
    [67] I. Sourdis and D. Pnevsmatikatos, 「Fast, Large-Scale String Match for a 10 Gbps FPGA-based Network Intrusion Detection System,」 Proc. IEEE FPL, pp. 880-889, 2003.
    [68] V. Srinivasan and G. Varghese, 「Fast Address Lookups Using Controlled Prefix Expansion,」 ACM Trans. on Computer System, vol. 17, no. 1, pp. 1-40, Feb. 1999.
    [69] V. Srinivasan, G. Varghese, S. Suri, and M. Waldvogel, 「Fast and Scalable Layer Four Switching,」 Proc. ACM SIGCOMM, pp. 191-202, 1998.
    [70] J.-S. Sung, S.-M. Kang, Y. Lee, T.-G. Kwon, and B.-T. Kim, 「A Multi-gigabit Rate Deep Packet Inspection Algorithm using TCAM,」 Proc. IEEE GLOBECOM, pp. 453-457, 2005.
    [71] L. Tan and T. Sherwood, 「A High Throughput String Matching Architecture for Intrusion detection and Prevention,」 Proc. IEEE ISCA, pp. 112-122, 2005.
    [72] L. Tan and T. Sherwood, 「Architecture For Bit-Split String Scanning in Intrusion Detection,」 IEEE Micro, vol. 26, no. 1, pp. 110-117, Jan.-Feb. 2006.
    [73] D. E. Taylor and J. S. Turner, 「ClassBench: A Packet Classification Benchmark,」 Proc. INFOCOM, pp. 2068-2079, 2005.
    [74] D. E. Taylor, 「Survey and Taxonomy of Packet Classification Techniques,」 ACM Computing Surveys, vol. 37, no.3, pp. 238-275, Sep. 2005.
    [75] D. E. Taylor and J. S. Turner, 「ClassBench: A Packet Classification Benchmark,」 IEEE/ACM Trans. on Networking, vol. 15, no. 3, pp. 499-511, June 2007.
    [76] N. Tuck, T. Sherwood, B. Calder, and G. Varghese, 「Deterministic Memory-Efficient String Matching Algorithms for Intrusion Detection,」 Proc. IEEE INFOCOM, pp. 2628-2639, 2004.
    [77] Y. Weinsberg, S. Tzur-David, D. Dolev, and T. Anker, 「High performance string matching algorithm for a network intrusion prevention system (NIPS),」 Proc. IEEE HPSR, pp. 1-7, 2006.
    [78] S. Wu and U. Manber, 「A Fast Algorithm For Multi-Pattern Searching,」 Tech. rep., Department of Computer Science, University of Arizona, 1994.
    [79] N. Yamagaki, R. Sidhu, and S. Kamiya, 「High-Speed Regular Expression Matching Engine Using Multi-Character NFA,」 Proc. IEEE FPL, pp. 697-701, 2008.
    [80] Y.-H. E. Yang, W. Jiang and V. K. Prasanna, 「Compact Architecture for High-Throughput Regular Expression Matching on FPGA,」 Proc. ACM/IEEE ANCS, pp.30-39, 2008.
    [81] F. Yu, R.H. Katz, and T.V. Lakshman, 「Gigabit Rate Packet Pattern-Matching using TCAM,」 Proc. IEEE ICNP, pp.174-183, 2004.
    [82] F. Yu, Z. Chen, Y. Diao, T. V. Lakshman, and R. H. Katz, 「Fast and Memory-Efficient Regular Expression Matching for Deep Packet Inspection,」 Proc. ACM/IEEE ANCS, pp. 93-102, 2006.
    [83] Xilinx, 「Virtex-5 Family Overview」, Product Specification, DS100 (v5.0), Feb. 6, 2009, at http://www.xilinx.com.
    [84] F. Zane, G. Narlikar, and A. Basu, 「CoolCAMs: Power-Efficient TCAMs for Forwarding Engines,」 Proc. INFOCOM, pp. 42-52, 2003.
    [85] X. Zha and S. Sahni, 「Highly Compressed Aho-Corasick Automata for Efficient Intrusion Detection,」 Proc. IEEE ISCC, pp.298-303, 2008.

    無法下載圖示 校內:2016-01-25公開
    校外:不公開
    電子論文尚未授權公開,紙本請查館藏目錄
    QR CODE