{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2023,10,6]],"date-time":"2023-10-06T05:11:01Z","timestamp":1696569061263},"reference-count":28,"publisher":"Wiley","issue":"2","license":[{"start":{"date-parts":[[2013,3,1]],"date-time":"2013-03-01T00:00:00Z","timestamp":1362096000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/http\/onlinelibrary.wiley.com\/termsAndConditions#vor"}],"funder":[{"name":"National High-Tech Research and Development Plan of China","award":["2011AA01A103"],"award-info":[{"award-number":["2011AA01A103"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Security Comm Networks"],"published-print":{"date-parts":[[2014,2]]},"abstract":"<jats:title>ABSTRACT<\/jats:title><jats:p>Stream reassembly is the premise of deep packet inspection, regarded as the core function of network intrusion detection system and network forensic system. As moving packet payload from one block of memory to another is essential for the reason of packet disorder, throughput performance is very vital in stream reassembly design. In this paper, a stream reassembly card (SRC) is designed to improve the stream reassembly throughput performance. The designed SRC adjusts the sequence of packets on the basis of the multicore network processing unit by managing and reassembling streams through an additional level of buffer. Specifically, three optimistic techniques, namely stream table dispatching, no\u2010locking timeout, and multichannel virtual queue, are introduced to further improve the throughput. To address the critical role of memory size in SRC, the relationship between the system throughput and memory size is analyzed. Extensive experiments demonstrate that the proposed SRC achieves more than 3\u2009Gbps in terms of reassembly and submission throughput and triply outperforms the traditional server\u2010based architecture with a lower cost. Copyright \u00a9 2013 John Wiley &amp; Sons, Ltd.<\/jats:p>","DOI":"10.1002\/sec.727","type":"journal-article","created":{"date-parts":[[2013,3,1]],"date-time":"2013-03-01T19:21:57Z","timestamp":1362165717000},"page":"265-278","source":"Crossref","is-referenced-by-count":4,"title":["SRC: a multicore NPU\u2010based TCP stream reassembly card for deep packet inspection"],"prefix":"10.1002","volume":"7","author":[{"given":"Shuhui","family":"Chen","sequence":"first","affiliation":[{"name":"College of Computer Science National University of Defense Technology  Changsha 410073 China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Rongxing","family":"Lu","sequence":"additional","affiliation":[{"name":"Department of Electrical and Computer Engineering University of Waterloo  Waterloo Ontario N2L 3G1 Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xuemin (Sherman)","family":"Shen","sequence":"additional","affiliation":[{"name":"Department of Electrical and Computer Engineering University of Waterloo  Waterloo Ontario N2L 3G1 Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"311","published-online":{"date-parts":[[2013,3]]},"reference":[{"key":"e_1_2_10_2_1","first-page":"199","volume-title":"Proceedings of the 2007 ACM\/SIGMA 15th international symposium on Field programmable gate arrays","author":"Nicholas W","year":"2007"},{"key":"e_1_2_10_3_1","doi-asserted-by":"crossref","first-page":"282","DOI":"10.1145\/1755688.1755723","volume-title":"Proceedings of the 5th ACM Symposium on Information, Computer and Communications Security","author":"Lu R","year":"2010"},{"key":"e_1_2_10_4_1","first-page":"1","volume-title":"Proceedings of the 6th ACM\/IEEE Symposium on Architectures for Networking and Communications Systems","author":"Martin L","year":"2010"},{"key":"e_1_2_10_5_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-87403-4_7"},{"key":"e_1_2_10_6_1","first-page":"265","volume-title":"Proceedings of the 12th International Symposium on Recent Advances in Intrusion Detection","author":"Giorgos V","year":"2009"},{"key":"e_1_2_10_7_1","doi-asserted-by":"crossref","first-page":"297","DOI":"10.1145\/2046707.2046741","volume-title":"Proceedings of the 18th ACM conference on Computer and communications security","author":"Vasiliadis G","year":"2011"},{"key":"e_1_2_10_8_1","first-page":"1","volume-title":"Conference of IEEE Globecom","author":"Lin CH","year":"2011"},{"key":"e_1_2_10_9_1","first-page":"8","volume-title":"Proceedings of the 19th USENIX conference on Security","author":"Meiners CR","year":"2012"},{"key":"e_1_2_10_10_1","unstructured":"EgorovS SavchukG.SNORTRAN: an optimizing compiler for snort rules.https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/http\/www.fidelissec.com\/snortran\/SNORTAN\u2010wp.pdf"},{"key":"e_1_2_10_11_1","unstructured":"PtacekT H NewshamT N.Insertion evasion and denial of service: Eluding network intrusion detection. DTIC Document 1998."},{"key":"e_1_2_10_12_1","unstructured":"NovakJ.Target\u2010based fragmentation reassembly. Sourcefire 2005."},{"key":"e_1_2_10_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/MNET.2003.1248656"},{"key":"e_1_2_10_14_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2005.02.008"},{"key":"e_1_2_10_15_1","unstructured":"Libnids.https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/http\/libnids.sourceforge.net"},{"key":"e_1_2_10_16_1","unstructured":"Tcpflow.https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/http\/afflib.org\/software\/tcpflow"},{"key":"e_1_2_10_17_1","doi-asserted-by":"publisher","DOI":"10.1023\/A:1020157925260"},{"issue":"1","key":"e_1_2_10_18_1","first-page":"46","article-title":"Counting network flows in real time","volume":"17","author":"Kim H","year":"2006","journal-title":"Comput Networks"},{"key":"e_1_2_10_19_1","first-page":"273","volume-title":"Proceedings of Future Generation Communication and Networking","author":"Wagener G","year":"2008"},{"key":"e_1_2_10_20_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-39927-8_36"},{"key":"e_1_2_10_21_1","first-page":"65","volume-title":"Proceedings of the 14th conference on USENIX Security Symposium","author":"Sarang D","year":"2005"},{"key":"e_1_2_10_22_1","unstructured":"Intel 82575EB GbE Controller Software Developer Manual.https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/http\/www.intel.com"},{"key":"e_1_2_10_23_1","first-page":"1","volume-title":"Proceedings of Workshop on Monitoring, Attack Detection and Mitigation","author":"Cascallana GA","year":"2006"},{"key":"e_1_2_10_24_1","first-page":"85","volume-title":"Proceedings of International System Administration and Network Engineering","author":"Deri L","year":"2004"},{"key":"e_1_2_10_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2003.810527"},{"key":"e_1_2_10_26_1","first-page":"47","volume-title":"Proceedings of the IEEE\/IFIP Workshop on End\u2010to\u2010End Monitoring Techniques and Services (E2EMON)","author":"Deri L","year":"2005"},{"key":"e_1_2_10_27_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-12334-4_13"},{"key":"e_1_2_10_28_1","unstructured":"FrancescoF LucaD.High speed network traffic analysis with commodity multi\u2010core systems. In Proceedings of the 10th Annual Conference on Internet measurement Melbourne Australia 2012;218\u2013224."},{"key":"e_1_2_10_29_1","unstructured":"IXIA.https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/http\/www.ixiacom.com\/"}],"container-title":["Security and Communication Networks"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/api.wiley.com\/onlinelibrary\/tdm\/v1\/articles\/10.1002%2Fsec.727","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/api.wiley.com\/onlinelibrary\/tdm\/v1\/articles\/10.1002%2Fsec.727","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/onlinelibrary.wiley.com\/doi\/pdf\/10.1002\/sec.727","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,10,5]],"date-time":"2023-10-05T02:43:56Z","timestamp":1696473836000},"score":1,"resource":{"primary":{"URL":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/onlinelibrary.wiley.com\/doi\/10.1002\/sec.727"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2013,3]]},"references-count":28,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2014,2]]}},"alternative-id":["10.1002\/sec.727"],"URL":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/doi.org\/10.1002\/sec.727","archive":["Portico"],"relation":{},"ISSN":["1939-0114","1939-0122"],"issn-type":[{"value":"1939-0114","type":"print"},{"value":"1939-0122","type":"electronic"}],"subject":[],"published":{"date-parts":[[2013,3]]}}}