用于高速入侵检测的工业物联网协议驱动

摘要

To solve the throughput issue of intrusion detection in industrial Internet of things (IIoT) protocol stack, the optimization method of protocol stack for Windows platform is proposed. The bottleneck of high throughput is determined respectively by using time and cycle per instruction (CPI) , the operation speed of memory is solved by using DMA technology. Aiming at the computational efficiency for protocol stack, the Hash algorithm based on SSE instruction is given; in addition, the operational efficiency of the protocol stack is resolved by adopting multithread protocol stack of multi-core CPU. The test shows that in the system composed of E5200 CPU and 3 GB memory, system resource loss is small with this protocol stack, and the detection speed enhances 30% , the industrial demand for data flow rate is met.%为了解决工业物联网协议栈所面临的高速入侵检测的吞吐量问题,提出了一种针对Windows平台的协议栈优化方法.分别指出了使用指令时间比分析协议栈高吞吐量的瓶颈所在,以及使用DMA技术解决协议栈内存操作速度的问题.针对协议栈计算效率问题,给出了基于SSE指令的哈希计算方法,并采用基于多核CPU的多线程协议栈解决协议栈运行效率问题.测试表明,在CPU配置为E5200、3 GB内存的系统中,该协议栈对系统资源损耗小,并使检测速度提高30％以上,能够满足工业对数据流速率的需求.