The Research On The Algorithm For Packet Classification Based On Bloom Filter

With the rapid development of Internet, the problems of network security become even more severe. Especially the constant appearances of new network attacks bring the great threats to the stability of network. Intrusion prevention is a technique to prevent all kinds of network attacks effectively by the means of active protection and defence on-line.However, with the constant increase of the link speed and network traffic, the implementation of Intrusion Prevention System (IPS) will meet a serious challenge on performance. The technique of packet classification is an important process in the implementation of IPS, and the efficiency of algorithms for packet classification plays a particular role in the performance of IPS. The purpose of this paper is to present a new algorithm for packet classification based on Bloom Filter and study the new algorithm deeply. The main contributions of this paper are as follows:Present a new algorithm for packet classification based on Bloom Filter which is named BFPC. The core idea of this algorithm is to make the function of packet classification by combining the counting Bloom filter with the dynamic chain lists. The algorithm of BFPC has the advantage over other algorithms in the aspects of time complexity, space complexity and so on.Make research in-depth on the power consumption of BFPC. With the purpose of reducing the power consumption, an optimized approach of combining the operation of two phases for hash function with the accurate match of the shortest chain list is presented. It is calculated that the optimization can reduce the power consumption of BFPC effectively.Make an approach to the model of IPS designed by hardware, and the framework to implement the pretreatment engine for data flow which is based on the BFPC in IPS is well introduced. The paper also analyzes the implementation of BFPC, including the setting of parameters, data structures, module partitions, manipulation process and so on.Bloom Filter plays an important role to support quick query of data elements. The algorithm of BFPC proposed in this paper gives a new way to apply the Bloom Filter to the design of equipments for network security, and has the significance of research and application.