权益分类	功能权益	普通用户	{{item.name}}会员
{{category.name}}	{{benefitItem.name}}

Coordinated Active Monitoring System

协调主动监测系统

基本信息

批准号：
16500028
负责人：
TAHAKASHI Naohisa
金额：
$ 2.37万
依托单位：
Nagoya Institute of Technology
依托单位国家：
日本
项目类别：
Grant-in-Aid for Scientific Research (C)
财政年份：
2004
资助国家：
日本
起止时间：
2004 至 2005
项目状态：
已结题

项目摘要

1.A Packet Capture System with an On-Chip Packet ClassifierA space-division packet classification system with approximation was proposed. It enables high-speed packet classification with lower memory requirements compared to previous systems. We also designed on-chip packet classifier by using the classification system and evaluated its performance.2.Coordinated Active Monitoring System with a Monitor GridWe developed a mechanism to dynamically select hosts, which generate loads and measure traffic synchronously, by using the Grid computing technologies. We also implemented a monitoring kernel as a middleware on distributed PCs which monitor packets and communicate with each other to investigate network status by using those packets.3.A Verification System for Configurations of Network Access InspectorsWe have developed a system that checks the consistency between a security policy and the configurations of network access inspectors (NAI) in a large scale network. This system has the three following functions : (1)to check the consistency of hierarchical networks, (2)to extract data necessary for checking the consistency of a network, and (3)to decompose procedures for checking consistency. These functions make inter-area and intra-area checks possible. As a result, we can obtain a consistent security policy in an entire network and make NAI configurations consistent with those of other areas.4.A Super-Stabilizing Spanning Tree ProtocolWe developed a super-stabilizing spanning tree protocol as a basis on a mechanism which detects anomalies by monitoring network status and make an automatic error recovery. The protocol is tolerant to single arbitrarily link failure.

1.基于片上分组分类器的分组捕获系统提出了一种基于近似的空分分组分类系统。与以前的系统相比，它能够以更低的内存需求实现高速数据包分类。利用该分类系统设计了片上数据包分类器，并对其性能进行了评估。2.基于监测网格的协同主动监测系统利用网格计算技术，提出了一种动态选择主机的机制，使负载产生和流量测量同步进行。我们还实现了一个监控内核作为分布式PC上的中间件，监控数据包，并相互通信，以调查网络状态，通过使用这些数据包。3.网络访问检查器的配置验证系统我们已经开发了一个系统，检查安全策略和网络访问检查器（NAI）的配置之间的一致性在一个大规模的网络。该系统具有以下三个功能：（1）检查分层网络的一致性，（2）提取检查网络一致性所需的数据，（3）分解检查一致性的过程。这些功能使区域间和区域内检查成为可能。因此，我们可以在整个网络中获得一致的安全策略，并使NAI配置与其他区域的配置一致。4.超稳定生成树协议我们开发了一个超稳定生成树协议，作为通过监视网络状态来检测异常并进行自动错误恢复的机制的基础。该协议对任意单链路故障具有容错能力。