DC 欄位 | 值 | 語言 |
dc.contributor.author | 孫雅麗 | zh_TW |
dc.creator | 孫雅麗 | - |
dc.date | 2005 | zh_TW |
dc.date.accessioned | 2006-07-26T01:37:49Z | - |
dc.date.accessioned | 2018-06-29T12:54:21Z | - |
dc.date.available | 2006-07-26T01:37:49Z | - |
dc.date.available | 2018-06-29T12:54:21Z | - |
dc.date.issued | 2005 | - |
dc.identifier | 932213E002113 | zh_TW |
dc.identifier.uri | http://ntur.lib.ntu.edu.tw//handle/246246/18848 | - |
dc.description.abstract | 在這一年的計畫當中,我們研究與實
作一個稱為SConPaC 的狀態化網路封包
內容分類器引擎以及其描述語言與編譯
器。SConPaC 的設計目標:不同於傳統
的封包分類器,本系統具有應用層內容檢
視、動態的通訊協定狀態紀錄與維持,以
及能夠同時處理IPv4/IPv6 封包的特點。
本系統a) 根據多種常見的通訊協定
與應用服務之規格開始,歸納出檢視封包
標頭與應用層內容時會使用的比對特徵;
進而設計合適的描述語言(script
language)。描述語言包含足夠的比對參數
種類,以滿足便利與彈性的需求; b) 描述
語言編譯器(script language compiler)將描
述語言翻譯成程式碼,自動地將規則寫進
規則資料庫內,以提供狀態化內容分類引
擎(stateful content-based classification
engine) 分類封包時的依據; c) 分類引擎
將分類程序切割成多個階段,每個階段由
不同的建構模組來進行分類程序; 以及d)
維持與追蹤通訊協定狀態。
本計畫所提出的SConPaC 封包分類
架構,不但符合現今封包分類的要求(狀態
化及內容檢視),同時也提出了獨創的概念
及設計。 | zh_TW |
dc.description.abstract | In this year of the project, we developed
a new stateful content-based packet
classification called SConPaC. The
motivation for developing SConPaC is
stated as follow: compared to the traditional
packet classifier, this architecture is capable
to inspect the packet application content,
maintain and track protocol state transition
dynamically, and handle both IPv4 and IPv6
packets.
We study numerous applications and
protocols in wide-spread use. We generalize
their features which are commonly utilized
when inspecting the application content and
packet header. Our Script Language covers sufficient types of matches to satisfy the
requirement of convenience and flexibility.
Script Language Compiler compiles the
script language into codes and stores the rule
specifications into a rule table. Along with
the rule s, SConPaC Engine can perform the
procedure of packet classification.
SConPaC Engine comprises several
functional components. Separating the
filtering procedure into multiple stages is
one of the features of Classification Engine.
Each stage is implemented as different
building blocks consistent with the
characteristics of the matches. In addition,
classification engine maintains and tracks
the state transition of protocols in order to
understand the evolution of connections.
The architecture we proposed not only
meets the requirements of current packet
classification (stateful and content
inspection), but also brings up some original
ideas and design. | en |
dc.format | application/pdf | zh_TW |
dc.format.extent | 99986 bytes | - |
dc.format.mimetype | application/pdf | - |
dc.language | zh-TW | zh_TW |
dc.language.iso | zh_TW | - |
dc.publisher | 臺北市:國立臺灣大學資訊管理學系暨研究所 | zh_TW |
dc.rights | 國立臺灣大學資訊管理學系暨研究所 | zh_TW |
dc.subject | 封包分類 | zh_TW |
dc.subject | 狀態 | zh_TW |
dc.subject | 內容檢視 | zh_TW |
dc.subject | Packet Classification | en |
dc.subject | Packet
Classifier | en |
dc.subject | Stateful | en |
dc.subject | Content Inspection | en |
dc.title | 以內容為基礎之網路安全─子計畫一:研究與實做在SoC環境下考慮狀態之網路內容分類的語言、編譯器與執行引擎 | zh_TW |
dc.title.alternative | Design and Implementation of the Specification Language, Compiler
and Engine for Stateful Content-based Processing in SoC
Environment | en |
dc.type | other | en |
dc.identifier.uri.fulltext | http://ntur.lib.ntu.edu.tw/bitstream/246246/18848/1/932213E002113.pdf | - |
dc.coverage | 計畫年度:93;起迄日期:2004-08-01/2005-07-31 | zh_TW |
item.fulltext | with fulltext | - |
item.cerifentitytype | Products | - |
item.openairecristype | http://purl.org/coar/resource_type/c_1843 | - |
item.grantfulltext | open | - |
item.openairetype | other | - |
item.languageiso639-1 | zh_TW | - |
crisitem.author.dept | Information Management | - |
crisitem.author.parentorg | College of Management | - |
顯示於: | 資訊管理學系
|