Title :
An efficient tcp flow reassembling algorithm based on PF_RING
Author :
Hao, Jie ; Hao, Yu-jie ; Chang, Jia-yu ; Li, Jian-ping
Author_Institution :
Dept. of Comput. Sci. & Eng., Univ. of Electron. Sci. & Technol. of China, Chengdu, China
Abstract :
Along with the development of Internet/Intranet application, more and more sensitive data is transmitted through the network. In order to prevent the critical data from being divulged and guarantee the security of information, we should pay more attention to the surveillance of network traffic. With this motivation, we present an efficient TCP flow reassembling algorithm which is the key of dataflow processing. Through this method, it is possible to get a whole idea of every TCP flow and providing a good reference to judgment. Testing of a prototype based on PF_RING demonstrated that our mechanism take a good performance in linux kernel 2.6.28.
Keywords :
Internet; Linux; algorithm theory; data flow computing; intranets; transport protocols; Internet application; Intranet application; PF_RING; dataflow processing; efficient TCP flow; good reference judgment; linux kernel; prevent critical data; reassembling algorithm; security information; sensitive data transmitted; surveillance network traffic; Data security; IP networks; Information security; Intrusion detection; Linux; Protocols; Prototypes; TCPIP; Telecommunication traffic; Testing; TCP Segment; TCP Session; TCP flows; TCP packet; reassembling;
Conference_Titel :
Apperceiving Computing and Intelligence Analysis, 2009. ICACIA 2009. International Conference on
Conference_Location :
Chengdu
Print_ISBN :
978-1-4244-5204-0
Electronic_ISBN :
978-1-4244-5206-4
DOI :
10.1109/ICACIA.2009.5361107
