Hash Distribution Algorithm With Better Uniformity for High-Speed Intrusion Detection
LU Rui-feng, Han Guo-qiang · Journal of Dongguan University of Technology · 2008
P2P is introduced into high-speed intrusion detection for load balancing in sensor network in this paper.By this means,traffic splitter only needs to deliver the high-speed network flow to sensors uniformly to the best of its abilities.As a result it reduces the load of splitter and a uniform hash algorithm based on P2P is presented. Considering the scale of network sensors,the IP and port address are divided to 8-bit substring in this algorithm,and then the 8-bit string should be calculated according to exclusive or bit shift rules.The results of theoretical analysis and contrastive experiment show that this algorithm has a maximal entropy and better uniformity.