Accelerating network security services with fast packet classification

To protect a network, secure network systems such as intrusion detection system (IDS) and firewall are often installed to control or monitor network traffic. These systems often incur substantial delay for analyzing network packets. The delay can be reduced with fast packet classification, which can effectively classify network traffic, and consequently accelerate the analysis of network packets. In the last few years, many researchers devoted to providing fast packet classification methods for multidimensional classifier. However, these methods either suffer from poor performance and huge storage requirement, or are lack of dimension scalability. In this paper, we propose a packet classification method based on tuple space search, and use the multidimensional binary search tree (Kd-tree) to improve search performance. The proposed scheme requires only O

• Type: Journal
• Year: 2004
• Where: COMCOM
• Authors: Shiuh-Pyng Shieh, Fu-Yuan Lee, Ya-Wen Lin
• Keywords: COMCOM 2004, Network Packets, Packet Classification, Packet Classification Method