The original paper is in English. Non-English content has been machine-translated and may contain typographical errors or mistranslations. ex. Some numerals are expressed as "XNUMX".
Copyrights notice
The original paper is in English. Non-English content has been machine-translated and may contain typographical errors or mistranslations. Copyrights notice
네트워크 트래픽 제어 및 분류는 침입 탐지 및 예방을 위한 가장 정밀한 기술인 심층 패킷 검사(DPI) 접근 방식에 점점 더 의존하게 되었습니다. 그러나 증가하는 트래픽 양과 링크 속도는 제한된 사용 가능한 메모리에서 고성능으로 패킷을 처리하는 DPI 기술에 상당한 압력을 가하고 있습니다. 이러한 문제를 극복하기 위해 우리는 뻐꾸기 필터(CF) 기반의 데이터 구조로 이중 뻐꾸기 필터(DCF)를 제안했다. CF는 PCF(병렬 뻐꾸기 필터)라는 병렬 모드로 확장될 수 있습니다. 제안된 데이터 구조는 항목의 두 가지 잠재적 인덱스를 얻기 위해 추가 해시 함수를 사용합니다. DCF는 추가 메모리 없이 CF의 우수성을 확대합니다. 또한 병렬 모드로 확장하여 PDCF(병렬 듀얼 쿠쿠 필터)라고 하는 데이터 구조를 만들 수 있습니다. 구현 결과에 따르면 DPI 시스템에서 DCF와 PDCF를 식별 도구로 사용하면 CF와 PCF에 비해 각각 최대 2%와 30%의 시간이 향상되는 것으로 나타났습니다.
Yixuan ZHANG
Hangzhou Dianzi University
Meiting XUE
Hangzhou Dianzi University
Huan ZHANG
Hangzhou Dianzi University
Shubiao LIU
Zhejiang University
Bei ZHAO
Hangzhou Dianzi University
The copyright of the original papers published on this site belongs to IEICE. Unauthorized use of the original or translated papers is prohibited. See IEICE Provisions on Copyright for details.
부
Yixuan ZHANG, Meiting XUE, Huan ZHANG, Shubiao LIU, Bei ZHAO, "Dual Cuckoo Filter with a Low False Positive Rate for Deep Packet Inspection" in IEICE TRANSACTIONS on Fundamentals,
vol. E106-A, no. 8, pp. 1037-1042, August 2023, doi: 10.1587/transfun.2022EAP1062.
Abstract: Network traffic control and classification have become increasingly dependent on deep packet inspection (DPI) approaches, which are the most precise techniques for intrusion detection and prevention. However, the increasing traffic volumes and link speed exert considerable pressure on DPI techniques to process packets with high performance in restricted available memory. To overcome this problem, we proposed dual cuckoo filter (DCF) as a data structure based on cuckoo filter (CF). The CF can be extended to the parallel mode called parallel Cuckoo Filter (PCF). The proposed data structure employs an extra hash function to obtain two potential indices of entries. The DCF magnifies the superiority of the CF with no additional memory. Moreover, it can be extended to the parallel mode, resulting in a data structure referred to as parallel Dual Cuckoo filter (PDCF). The implementation results show that using the DCF and PDCF as identification tools in a DPI system results in time improvements of up to 2% and 30% over the CF and PCF, respectively.
URL: https://global.ieice.org/en_transactions/fundamentals/10.1587/transfun.2022EAP1062/_p
부
@ARTICLE{e106-a_8_1037,
author={Yixuan ZHANG, Meiting XUE, Huan ZHANG, Shubiao LIU, Bei ZHAO, },
journal={IEICE TRANSACTIONS on Fundamentals},
title={Dual Cuckoo Filter with a Low False Positive Rate for Deep Packet Inspection},
year={2023},
volume={E106-A},
number={8},
pages={1037-1042},
abstract={Network traffic control and classification have become increasingly dependent on deep packet inspection (DPI) approaches, which are the most precise techniques for intrusion detection and prevention. However, the increasing traffic volumes and link speed exert considerable pressure on DPI techniques to process packets with high performance in restricted available memory. To overcome this problem, we proposed dual cuckoo filter (DCF) as a data structure based on cuckoo filter (CF). The CF can be extended to the parallel mode called parallel Cuckoo Filter (PCF). The proposed data structure employs an extra hash function to obtain two potential indices of entries. The DCF magnifies the superiority of the CF with no additional memory. Moreover, it can be extended to the parallel mode, resulting in a data structure referred to as parallel Dual Cuckoo filter (PDCF). The implementation results show that using the DCF and PDCF as identification tools in a DPI system results in time improvements of up to 2% and 30% over the CF and PCF, respectively.},
keywords={},
doi={10.1587/transfun.2022EAP1062},
ISSN={1745-1337},
month={August},}
부
TY - JOUR
TI - Dual Cuckoo Filter with a Low False Positive Rate for Deep Packet Inspection
T2 - IEICE TRANSACTIONS on Fundamentals
SP - 1037
EP - 1042
AU - Yixuan ZHANG
AU - Meiting XUE
AU - Huan ZHANG
AU - Shubiao LIU
AU - Bei ZHAO
PY - 2023
DO - 10.1587/transfun.2022EAP1062
JO - IEICE TRANSACTIONS on Fundamentals
SN - 1745-1337
VL - E106-A
IS - 8
JA - IEICE TRANSACTIONS on Fundamentals
Y1 - August 2023
AB - Network traffic control and classification have become increasingly dependent on deep packet inspection (DPI) approaches, which are the most precise techniques for intrusion detection and prevention. However, the increasing traffic volumes and link speed exert considerable pressure on DPI techniques to process packets with high performance in restricted available memory. To overcome this problem, we proposed dual cuckoo filter (DCF) as a data structure based on cuckoo filter (CF). The CF can be extended to the parallel mode called parallel Cuckoo Filter (PCF). The proposed data structure employs an extra hash function to obtain two potential indices of entries. The DCF magnifies the superiority of the CF with no additional memory. Moreover, it can be extended to the parallel mode, resulting in a data structure referred to as parallel Dual Cuckoo filter (PDCF). The implementation results show that using the DCF and PDCF as identification tools in a DPI system results in time improvements of up to 2% and 30% over the CF and PCF, respectively.
ER -