LASF：flow management and scheduling policy in stateful packet inspection systems

Computer Engineering and Applications ›› 2007, Vol. 43 ›› Issue (28): 111-114.

• 网络、通信与安全 • Previous Articles Next Articles

LASF：flow management and scheduling policy in stateful packet inspection systems

ZHANG Yan-jun^1,2,ZHANG Zhi-bin^1,2,GUO Li¹,FANG Bin-xing¹

1.Research Center of Information Intelligent and Information Security,Institute of Computing Technology,CAS,Beijing 100080,China
2.Graduate University of Chinese Academy of Science,Beijing 100039,China

Received:1900-01-01 Revised:1900-01-01 Online:2007-10-01 Published:2007-10-01
Contact: ZHANG Yan-jun

状态封包检测中的连接管理和调度策略—LASF

张艳军^1,2,张志斌^1,2,郭莉¹,方滨兴¹

1.中国科学院计算技术研究所信息智能与信息安全研究中心,北京 100080
2.中国科学院研究生院,北京 100039

通讯作者: 张艳军

Abstract

Abstract: Current increase in network bandwidth and frequently network attack raise an aggressive challenge in network security systems based stateful packet inspection.In this paper,we start by an analysis of TCP connection setup time and sojourn time distribution of network traffic.Based on this analysis,we design a two level session table in order to avoid session table explosion.Then we propose a connection scheduling policy in stateful packet inspection systems called LASF（Least Attained Sojourn First）,which based on classical queuing theory and TCP connection characteristic in high speed network.It shows that this policy can improve flow throughput especially when system is overloaded.

Key words: stateful packet inspection, scheduling, session table, Least Attained Sojourn First（LASF）

摘要： 网络带宽的增长和频繁的网络攻击给状态封包检测等网络安全系统的性能带来了很大挑战。通过分析TCP连接建立延迟时间分布特性和连接逗留时间分布特性,设计了一个两级连接状态表,很好地解决了检测系统中的连接状态表急剧增长问题。然后,基于经典排队论和高速骨干网的TCP连接特性提出了一个流调度策略LASF（Least Attained Sojourn First）。通过实验证明,该策略能够在系统负载过重时显著提高系统的连接吞吐率等性能。

关键词: 状态封包检测, 调度, 连接状态表, 逗留时间最小优先

ZHANG Yan-jun^1,2,ZHANG Zhi-bin^1,2,GUO Li¹,FANG Bin-xing¹. LASF：flow management and scheduling policy in stateful packet inspection systems [J]. Computer Engineering and Applications, 2007, 43(28): 111-114.

张艳军^1,2,张志斌^1,2,郭莉¹,方滨兴¹. 状态封包检测中的连接管理和调度策略—LASF[J]. 计算机工程与应用, 2007, 43(28): 111-114.

[1]	XIE Ruiqiang, ZHANG Huizhen. Two-Vector Wolf Pack Algorithm for Flexible Job Shop Scheduling Problem [J]. Computer Engineering and Applications, 2021, 57(7): 251-256.
[2]	WANG Yuncheng, ZHOU Chunhua, CHEN Chuxiang, WU Shanming, CHEN Bing. Extensible Intelligent Scheduling System Based on Two Fork Knowledge Tree Reasoning [J]. Computer Engineering and Applications, 2021, 57(5): 251-257.
[3]	ZHANG Chi, WANG Yuxin, FENG Zhen, GUO He. Energy-Efficient Task Scheduling Algorithm in Two-Layer Virtualized Cloud Architecture [J]. Computer Engineering and Applications, 2021, 57(3): 103-111.
[4]	LI Baoshuai, YE Chunming. Job Shop Scheduling Problem Based on Deep Reinforcement Learning [J]. Computer Engineering and Applications, 2021, 57(23): 248-254.
[5]	CAO Lijia, LIU Yang. Recent Advances in Scheduling Optimization of Automated Guided Vehicles in Manufacturing Workshops [J]. Computer Engineering and Applications, 2021, 57(21): 59-67.
[6]	ZHOU Yamin, YANG Yongsheng, ZHONG Meisu, WANG Yusheng, XU Xueqian. Scheduling of Crossing Double ASC in Yard of Automated Terminals [J]. Computer Engineering and Applications, 2021, 57(2): 251-256.
[7]	SHI Yuqiang, TIAN Yongzheng, ZHANG Yuqi, SHI Xiaoqiu. Solving FJSP by Multi-population Genetic Algorithms with Complex Network Structure [J]. Computer Engineering and Applications, 2021, 57(2): 257-266.
[8]	TIAN Zhuojing, HUANG Zhenchun, ZHANG Yinong. Review of Task Scheduling Methods in Cloud Computing Environment [J]. Computer Engineering and Applications, 2021, 57(2): 1-11.
[9]	ZHOU Yuanling, HU Xiaobing, JIANG Daiyu, LI Hang. Research on Optimization Algorithm of Workshop Scheduling Based on Improved NSGA-II [J]. Computer Engineering and Applications, 2021, 57(19): 274-281.
[10]	DAI Jiangtao, HAN Xiaolong. Coordinated Scheduling of Equipment in Container Terminals Considering Energy Consumption Under Different Job Status [J]. Computer Engineering and Applications, 2021, 57(19): 290-298.
[11]	LI Yuxin, LI Yueyue. Multi-objective Vehicle Scheduling Problem for JIT Procurement [J]. Computer Engineering and Applications, 2021, 57(12): 263-272.
[12]	GUO Jiali, WANG Qiuping, WANG Xiaofeng. Hybrid Moth Flame Algorithm with Learning Strategy and Neighboring Search [J]. Computer Engineering and Applications, 2021, 57(12): 170-179.
[13]	LIANG Chengji, HUANG Shuai. Scheduling Optimization of Multiple Container Blocks with Multiple Yard Cranes at Container Terminal Based on Time Window [J]. Computer Engineering and Applications, 2020, 56(8): 226-232.
[14]	YANG Yajie, CHANG Daofang, YU Fang. Multi-Resource Coordinated Scheduling of Automated Terminals Considering AGV Collision Avoidance [J]. Computer Engineering and Applications, 2020, 56(6): 246-253.
[15]	QIN Qin, LIANG Chengji. Optimization of Equipment Coordination Scheduling with Considering Buffer Space in Automated Container Terminal [J]. Computer Engineering and Applications, 2020, 56(6): 262-270.

LASF：flow management and scheduling policy in stateful packet inspection systems

状态封包检测中的连接管理和调度策略—LASF

PDF

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics