Access Control Module Design for Switcher Applications

WEI Rong-you; WU Long-sheng; CHEN Qing-yu; Zhao Wen-qi

Chinese

您当前的位置：

首页 >

文章列表页 >

Access Control Module Design for Switcher Applications

更新时间：2026-09-04

- Access Control Module Design for Switcher Applications
- Vol. 35, Issue 10, Pages: 136-140(2018)
- 作者机构：
  
  西安微电子技术研究所,陕西,西安,710054
- 作者简介：
- 基金信息：
- DOI：
  CLC：
- Published：2018
- 稿件说明：
移动端阅览
位荣友, 吴龙胜, 陈庆宇, 赵文琦. 一种面向交换机应用的访问控制模块设计[J]. 微电子学与计算机, 2018, 35(10): 136-140.

WEI Rong-you, WU Long-sheng, CHEN Qing-yu, et al. Access Control Module Design for Switcher Applications[J]. 2018, 35(10): 136-140.
位荣友, 吴龙胜, 陈庆宇, 赵文琦. 一种面向交换机应用的访问控制模块设计[J]. 微电子学与计算机, 2018, 35(10): 136-140. DOI：

WEI Rong-you, WU Long-sheng, CHEN Qing-yu, et al. Access Control Module Design for Switcher Applications[J]. 2018, 35(10): 136-140. DOI：

摘要

为了解决交换机中数据风暴、DoS(Denial of Service)攻击等网络安全问题

本文提出了一种基于数据帧差异化控制的访问控制模块

该模块以接收端口数据帧为基本粒度进行解析

生成与接口数据帧一一对应的解析关键字

然后通过解析关键字的匹配分析对数据帧进行差异化管理

同时通过令牌桶和计数器进行数据帧流量控制

从而实现了对以太网各种数据帧的过滤、TOS/DSCP修改以及转发向量更新等.仿真结果表明

该模块实现了预期功能

满足项目应用需求.

Abstract

In order to address the network security issues such as data storms and DoS etc

a frame-differentiation-control-based access control module is presented in this paper. Firstly

data frames from the receiving port are analyzed as the basic granularity. And then analytical keywords are generated corresponding to those data frames. Finally

the differentiated management is implemented based on the analysis for analytical keywords of data frames. Simultaneously

frame filtering

TOS/DSCP modification and forwarding vector updates are also implemented by traffic controls of data frame which base on the token bucket and counter.The function of access control module has been verified and analysis

which shows that the expected function are achieved and project applicaton requirements are satisfied.

关键词

Keywords

references

薛文莲.基于双层标签的VLAN交换技术的研究[D].北京: 北京邮电大学, 2013.

张怀庆.基于TCAM和多核处理器的高速路由查找转发引擎设计[D].济南: 山东大学, 2008.

周明天, 汪文勇. TCP/IP网络原理与技术[M].北京:清华大学出版社有限公司, 1993.

Ishikawa T, Yoshiura N. Decreasing access control list processed in hardware[J]. Management Enabling the Future Internet for Changing Business and New Computing Services, 2009: 453-457. DOI: 453

马徐瀚, 吴龙胜, 赵坤鹏, 等.一种基于多令牌桶的数据风暴抑制单元[J].微电子学与计算机, 2016, 33(9): 84-88. DOI: 84

柯向东, 黄建华.基于TCAM的IPSec快速查找技术[J].微计算机信息, 2005, 21(08X): 4-6. DOI: 4

谢声时, 陈海鸿, 汪浩, 等.交换机ACL的研究与应用[J].华南金融电脑, 2009 (12): 40-41. DOI: 40

Views

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

A Scheme of Multi-authorization Access Control and User Attribute Revocation in Cloud Storage

Attribute-based Access Control with Efficient Revocation in Cloud Storage Systems

Microservices anomaly detection based on the correlation of monitoring metrics

A review of large model development: technological evolution from BERT to Deepseek

Implementation and verification of a dual-chain power gating strategy for low power design

Related Author

JIANG Ze-tao

WANG Wei-feng

LIU Bo-hong

SHI Hui-li

Related Institution

The Key Laboratory of Image and Graphic Intelligent Processing of Guangxi, Guilin University of Electronic Technology

The Key Laboratory of Image and Graphic Intelligent Processing of Higher Education in Guangxi, Guilin University of Electronic Technology

College of Computer Science and Technology, Chongqing University of Posts and Telecommunications

AI问答

Postal code：100079
Tel：（010）53879206 Email：tmw@bjxintong.com.cn
Technical support is provided by Beijing Founder electronics co., LTD 京ICP备09082226号-64 京公网安备11010602201714号
It is recommended to read the content of this site in Chrome&IE9+. Please switch to extreme mode in browser 360.
Cookies We use cookies to help provide and enhance our service and tailor content. By continuing, you agree to the use of cookies.

⁰