Application of Bloom Filter for GTP Stateful Inspection in Network Processor

摘要：

The 3rd Generation network rely on a key protocol—the GPRS Tunneling Protocol (GTP). However, GTP itself is not designed to be secure. So it is necessary to inspect the legal GTP channels and protect the backbone. Because a great deal of GTP-U packets transferring in the channels and the 3G firewall is required to check ten thousand GTP channels which needs mass bytes, so a fast and saving space algorithm is needed. A Bloom Filter algorithm is used to inspect the GTP-U flows. This method takes advantages of multi-threads and hash units of network processor. The analyses prove that the method only store some bit vectors and corresponding counters which needs less space. The experiments show this method can inspect of 1Gbps flow in the GTP channel.

关键词： GTP Network Processor Teid Stateful Inspection

作者: ZhenYu Liu Weijun Li Yue Lai

作者单位: School of Electronic and Information Engineering South China University of Technology,Guangzhou,GuangDong,510641,China

会议类型: 国际会议

会议名称: The Fifth International Conference on Information Assurance and Security(第五届信息保障与安全国际会议)

会议地点: 西安

会议语种:英文

页码: 589-592

在线出版日期: 2009-08-18（万方平台首次上网日期，不代表论文的发表时间）