计算机工程与应用 ›› 2007, Vol. 43 ›› Issue (29): 143-145.

• 网络、通信与安全 • 上一篇    下一篇

基于模式串匹配的Ethernet协议识别算法研究

李雄伟,王希武,王盼卿   

  1. 军械工程学院 计算机工程系,石家庄 050003
  • 收稿日期:1900-01-01 修回日期:1900-01-01 出版日期:2007-10-11 发布日期:2007-10-11
  • 通讯作者: 李雄伟

Ethernet protocol identification algorithm based on pattern matching

LI Xiong-wei,WANG Xi-wu,WANG Pan-qing   

  1. Department of Computer Engineering,Ordnance Engineering College,Shijiazhuang 050003,China
  • Received:1900-01-01 Revised:1900-01-01 Online:2007-10-11 Published:2007-10-11
  • Contact: LI Xiong-wei

摘要: 协议识别是网络安全与对抗领域中的一项关键技术。简要介绍了网络协议识别的重要性,分析了Ethernet类协议的特征,构建了协议识别的系统模型,依据Ethernet类协议的特征,提出了一种新的基于模式串匹配的协议识别算法NEWMATCH,并对该算法的性能进行了分析,并与传统模式串匹配算法(如:BF、KMP、BM等)进行了比较。该算法在Ethernet类协议识别方面具有一定的适用性。

关键词: 网络对抗, 协议识别, 模式串匹配, Ethernet协议

Abstract: Protocol identification is the key technology in the field of network security and countermeasure.In this paper,the essentialities of protocol identification is present,the characters of Ethernet protocol are analyzed,the system model is built,according to the characters of Ethernet protocol,a new protocol identification algorithm(NEWMATCH) based on pattern matching is proposed,the performance of the algorithm is analyzed.The results which comparing the algorithm with the traditional pattern matching algorithms(such as BF,KMP and BM) indicate the applicability for the Ethernet protocol identification.

Key words: network countermeasure, protocol identification, pattern matching, Ethernet protocol