协议内容还原是进行网络内容安全监管的核心技术,而传统的协议还原系统采用单线程运行,还原效率较低,无法满足高速网络流量的需求.总结了协议还原的多核架构,针对协议内容还原的特点,提出了一种协议内容还原的通用算法模型,并给出了两种协议的具体还原示例.新的算法使用哈希散列链表来保存会话状态,提升了会话查找的速率,能够准确高效的完成协议内容还原.实验表明,算法在还原速率和还原准确率上具有优势.
Protocol content restoring plays an important role in network content security supervision, but the current protocol restoring system with a poor efficiency by single thread cannot bear the high speed data flow. First, we provide a multi-core architecture of pro- tocol restoring, and then propose a general algorithm model of the application-layer protocol content restoring according to the feature of protocol content restoring, also we give two detailed examples of the reconstruction method. The new algorithm using the hash ta-ble to save the session state can reconstruct the protocol content correctly and efficiently. From the experiments, it's showed that the restoring algorithm has good performance.