کد مقاله | کد نشریه | سال انتشار | مقاله انگلیسی | نسخه تمام متن |
---|---|---|---|---|
6882737 | 1443884 | 2018 | 31 صفحه PDF | دانلود رایگان |
عنوان انگلیسی مقاله ISI
RuleBender: Tree-based policy transformations for practical packet classification systems
دانلود مقاله + سفارش ترجمه
دانلود مقاله ISI انگلیسی
رایگان برای ایرانیان
موضوعات مرتبط
مهندسی و علوم پایه
مهندسی کامپیوتر
شبکه های کامپیوتری و ارتباطات
پیش نمایش صفحه اول مقاله
چکیده انگلیسی
Many existing packet filter implementations use rule set guided packet classification to discriminate incoming network traffic. However, these implementations often rely on slow linear search through the rule set, which diminishes the achievable throughput. Therefore, we propose RuleBender, a rule set transformation technique that encodes decision tree search structures into the transformed rule set, which in turn can be traversed significantly faster. To this end, RuleBender uses the widely supported jump action feature, that enables the redirection of the matching flow to another rule in the otherwise linearly traversed rule set. That way, incoming packets are directed to small sub rule sets that can be searched quickly. In contrast to related work, RuleBender is not restricted to rules that exclusively define geometric matching criteria such as range or subnet tests, but instead inherently supports complex tasks such as payload inspection. RuleBender-generated rule sets can lead to throughput increases up to 13x when compared to the unmodified rule sets, and up to 4x when compared to related work.
ناشر
Database: Elsevier - ScienceDirect (ساینس دایرکت)
Journal: Computer Networks - Volume 135, 22 April 2018, Pages 253-265
Journal: Computer Networks - Volume 135, 22 April 2018, Pages 253-265
نویسندگان
Sven Hager, Patrik John, Stefan Dietzel, Björn Scheuermann,