A rule matching method and system supporting modbustcp low-latency processing

A matching method and low-latency technology, applied in the field of rule matching that supports ModbusTCP low-latency processing, can solve problems such as long matching time, and achieve the effect of short matching time and good portability

Active Publication Date: 2021-09-03
CHANGSHA UNIVERSITY +1
View PDF8 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0004] For the above defects or improvement needs of the prior art, the present invention provides a rule matching method and system that supports ModbusTCP low-latency processing, and its purpose is to put all the rules in the rule file into The corresponding position in the decision tree, and then filter the ModbusTCP data packet, thus solving the technical problem of long matching time existing in the existing industrial control firewall mechanism

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • A rule matching method and system supporting modbustcp low-latency processing
  • A rule matching method and system supporting modbustcp low-latency processing

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0042] In order to make the object, technical solution and advantages of the present invention more clear, the present invention will be further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described here are only used to explain the present invention, not to limit the present invention. In addition, the technical features involved in the various embodiments of the present invention described below can be combined with each other as long as they do not constitute a conflict with each other.

[0043] Such as figure 2 As shown, the present invention provides a kind of rule matching method that supports ModbusTCP low-latency processing, comprises the following steps:

[0044] (1) receive the ModbusTCP protocol data packet, analyze the ModbusTCP protocol data packet, and judge whether the ModbusTCP protocol data packet includes at least one operation field according to the analysis ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a rule matching method supporting ModbusTCP low-delay processing, and belongs to the technical field of industrial firewalls. The present invention includes: receiving the ModbusTCP protocol data packet, analyzing the ModbusTCP protocol data packet, and judging whether the ModbusTCP protocol data packet includes at least one operation field according to the analysis result, and if so, using a pre-built decision tree pair to obtain The parsing results are matched to obtain the final matching result. The operation field includes a function code field, a sub-function code field, an access type field, a register address field, and a register value field. The present invention constructs a decision tree, puts all the rules in the rule file into corresponding positions in the decision tree, and then filters the ModbusTCP data packets, thereby solving the technical problem of long matching time existing in the existing industrial control firewall mechanism .

Description

technical field [0001] The invention belongs to the technical field of industrial firewalls, and more specifically relates to a rule matching method and system supporting ModbusTCP low-delay processing. Background technique [0002] Filtering data packets of some common industrial control protocols (such as ModbusTCP protocol) is an essential function of existing industrial control firewalls. When a ModbusTCP data packet passes through the industrial control firewall, the firewall first decodes the protocol, decodes several key fields, and then matches multiple whitelist rules one by one until a match is found. [0003] However, there are still some shortcomings in the existing industrial control firewall mechanism: first, when the number of whitelist rules is large, the matching time will increase significantly; secondly, whether a ModbusTCP packet can be quickly matched depends entirely on the whitelist rules in the rules The storage order in the file, when the matching w...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Patents(China)
IPC IPC(8): H04L29/06H04L12/40
CPCH04L63/0263H04L63/101H04L2012/40228
Inventor 杨志邦钟凯李方敏周旭刘楚波肖国庆李克勤
Owner CHANGSHA UNIVERSITY
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products