舰船电子工程
艦船電子工程
함선전자공정
SHIP ELECTRONIC ENGINEERING
2012年
4期
133-136
,共4页
TCP%状态检测%硬件%匹配%循环管理策略
TCP%狀態檢測%硬件%匹配%循環管理策略
TCP%상태검측%경건%필배%순배관리책략
TCP%state detection%hardware%matching%cycle management strategy
提出了一种利用硬件实现的TCP包状态检测系统模型,与传统的状态检测系统的区别在于:1)提出established状态时的数据匹配,以防止包数据的攻击;2)利用哈希算法快速存放、查找信息的特点实现状态信息的存储和转换;3)采用时间地址循环超时管理策略来管理超时的连接。实验结果表明,该设计在能防止一些网络数据攻击的基础上快速准确地实现TCP状态转换功能。
提齣瞭一種利用硬件實現的TCP包狀態檢測繫統模型,與傳統的狀態檢測繫統的區彆在于:1)提齣established狀態時的數據匹配,以防止包數據的攻擊;2)利用哈希算法快速存放、查找信息的特點實現狀態信息的存儲和轉換;3)採用時間地阯循環超時管理策略來管理超時的連接。實驗結果錶明,該設計在能防止一些網絡數據攻擊的基礎上快速準確地實現TCP狀態轉換功能。
제출료일충이용경건실현적TCP포상태검측계통모형,여전통적상태검측계통적구별재우:1)제출established상태시적수거필배,이방지포수거적공격;2)이용합희산법쾌속존방、사조신식적특점실현상태신식적존저화전환;3)채용시간지지순배초시관리책략래관리초시적련접。실험결과표명,해설계재능방지일사망락수거공격적기출상쾌속준학지실현TCP상태전환공능。
The article describes a TCP packets state detection system based on hardware. Compared with traditional state detection sys- tem, some new methods are presented. First, in order to prevent packets data intrusion, the data matching of established state is presented; Second, the use of features of hash algorithm fast and storage, to find information to achieve state of information storage and conversion; Third, the timeout address cycle management strategy is used to manage the connection timed out. Experimental results show that the TCP state transition function of this system can he achieved quickly and accurately, while it can prevent some packets data attacking.