A parameterized multilevel pattern matching architecture on FPGAs for network intrusion detection and prevention

Pattern matching is one of the most performance-critical components for the content inspection based applications of network security, such as network intrusion detection and prevention. To keep up with the increasing speed network, this component needs to be accelerated by well designed custom coprocessor. This paper presents a parameterized multilevel pattern matching architecture (MPM) which is used on FPGAs. To achieve less chip area, the architecture is designed based on the idea of selected character decoding (SCD) and multilevel method which are analyzed in detail. This paper also proposes an MPM generator that can generate RTL-level codes of MPM by giving a pattern set and predefined parameters. With the generator, the efficient MPM architecture can be generated and embedded to a total hardware solution. The third contribution is a mathematical model and formula to estimate the chip area for each MPM before it is generated, which is useful for choosing the proper type of FPGAs. One example MPM architecture is implemented by giving 1785 patterns of Snort on Xilinx Virtex 2 Pro FPGA. The results show that this MPM can achieve 4.3 Gbps throughput with 5 stages of pipelines and 0.22 slices per character, about one half chip area of the most area-efficient architecture in literature. Other results are given to show that MPM is also efficient for general random pattern sets. The performance of MPM can be scalable near linearly, potential for more than 100 Gbps throughput. Supported by the National Natural Science Foundation of China (Grant No. 60803002), and the Excellent Young Scholars Research Fund of Beijing Institute of Technology     

网络仿真在教学中的应用研究

网络仿真技术是一种通过建立网络设备、链路和协议模型,并模拟网络流量的传输,从而获取网络设计或优化所需要的网络性能数据的仿真技术。该文使用主流网络仿真工具NS2对教学实验网络建立了仿真模型．讨论了网络拓扑结构和仿真参数的选取方法。仿真结果表明丢包率随着网络数目的增加显著提高。     

Accurate evaluation of Green’s functions in a layered medium by SDP-FLAM

Based on local Taylor expansions on the complex plane, a method for fast locating all modes (FLAM) of spectral-domain Green’s Functions in a planar layered medium is developed in this paper. SDP-FLAM, a combination of FLAM with the steepest descent path algorithm (SDP), is employed to accurately evaluate the spatial-domain Green’s functions in a layered medium. According to the theory of complex analysis, the relationship among the poles, branch points and Riemann sheets is also analyzed rigorously. To inverse the Green’s functions from spectral to spatial domain, SDP-FLAM method and discrete complex image method (DCIM) are applied to the non-near field region and the near filed region, respectively. The significant advantage of SDP-FLAM lies in its capability of calculating Green’s functions in a layered medium of moderate thickness with loss or without loss. Some numerical examples are presented to validate SDP-FLAM method. Supported by the National Natural Science Foundation of China (Grant No. 60621002), and the State Key Development Program for Basic Research of China (Grant No. 2009CB320200)     

校园网VOD系统服务质量研究

近年来,随着我国教育信息化的高速发展,校园网上VOD多媒体教学视频流的传输面临着越来越多的服务质量(Quality of Service,QoS)需求。当今的基于Ipv4的网络在流量、延迟和网络带宽管理上功能很弱,不可能给这些流媒体应用提供真正的QoS控制和保证。构建新的Ipv6校园网,在流媒体技术的基础上,结合Ipv6技术与组播技术,才能更好的解决校园网上流媒体传输的QoS问题。     

基于混合式P2P网络的网络教学平台的研究与设计

该文提出了利用P2P网络技术构建网络教学平台的设想,简要介绍了当前的P2P技术,分析了其技术优势,设计了一个基于混合式P2P网络的网络教学平台模型,并深入讨论了系统实现几个关键问题,提出了解决方案。     

一种新颖的无线传感器网络双向路由协议

目前对于传感器网络路由协议的研究越来越引起科学和工程界的广泛重视,但对于双向路由协议的研究还相对比较少,这是由于在传感器网络中,现有带宽对上行和下行链路同时工作支持得并不是很充分。一般来说,基于树型结构的上行路由被用来从感知节点接收数据,而下行路由一般以泛洪的方式广播兴趣信息到感知节点,这导致在下行链路上经常出现过载的情况。本文基于新颖的地址标记方式提出了一个有效的传感器网络双向链路路由协议,而且该方式在每个节点上只占用很小的地址空间。仿真结果表明,相对于传统的泛洪方式的路由协议来说,我们所提出的路由协议所产生的控制包数量远远小于已有路由协议。     

Java程序到类图和AISD的转换方法研究

论述了Java类、UML类图和过程蓝图AISD的基本概念,详细介绍了Java程序和类图、抽象实现结构图的映射关系及转换方法,使抽象模型能全面地表达所对应的程序代码.     

微型无人机5/3提升小波改进算法FPGA设计

数字图像无线传输是微型无人机完成特殊侦察任务的重要组成部分.针对微型无人机的特点及其对数字图像压缩的实时性要求,重点提出了一种提取图像重要信息的内嵌延拓5/3提升小渡改进算法,且基于该改进算法设计了一种二维数字图像小波变换的硬件结构并进行仿真实验分析.结果表明,该结构算法简单、占硬件资源少、硬件利用率高;与传统小波变换相比有效地缩短了运算时间、提高了变换速度,基本满足微型无人机对数字图像传输的实时性要求.     

嵌入式1394总线接口的设计和实现

本文介绍一种嵌入式处理器与1394总线接口设计方法,并给出基于现场可编程门阵列(FPGA)设计的VHDL代码结构、仿真时序和试验结果,最后提出了一种新的通用接口设计方法并指出了它的优势所在.     

基于(m,k)-firm约束规范的混合任务调度算法研究

讨论了在准实时环境下,包括准实时周期任务和准实时非周期任务在内的混合任务调度算法HTSF.HTSF算法是在满足周期任务(m,k)-firm 约束规范的前提下提高非周期任务可调度性,同时合理利用可用空闲时间,提高整个系统的服务质量.HTSF算法给出了非周期任务的可调度性分析方法,同时采用静态调度与动态调度相结合的方法调度周期任务和非周期任务.模拟测试结果显示,系统对非周期任务的接收率比同类相关算法的接收率高.