Dynamic Packet Filtering via Frequency-Based Pattern Matching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Hardware-based packet filtering systems face challenges in adapting to dynamic traffic conditions and require special hardware for DoS detection and QoS, leading to inflexibility and increased costs, as well as difficulty in addressing unknown risks and new requirements.
Innovation Solution
A packet processing apparatus with a static pattern matching unit, frequency calculating unit, and dynamic pattern matching unit that compares packet information with stored patterns and frequency data to dynamically adjust filtering decisions, allowing for flexible and adaptive packet processing without the need for special hardware.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If filtering function is implemented in software, then flexibility is improved, but processing speed deteriorates
Solution Approach 1:
The patent implements dynamic pattern matching units that can adaptively adjust filtering criteria based on observed traffic patterns. The system transitions from static ACL-based filtering to dynamic filtering where matching conditions are continuously updated based on frequency calculations and pattern recognition, enabling the hardware to maintain high speed while adapting to changing traffic conditions
Solution Approach 2:
The system changes the parameters of packet filtering by introducing frequency-based matching criteria. Instead of only using predefined static patterns, the system calculates packet frequencies and dynamically adjusts filtering parameters based on observed traffic characteristics, allowing hardware to achieve software-level flexibility while maintaining high processing speed
2Adaptability or versatility
If special hardware is added for DoS detection and QoS, then functionality is improved, but device complexity and cost increase
Solution Approach 1:
The patent creates a universal packet processing architecture that can perform multiple functions including DoS detection, QoS filtering, and general packet filtering through a single dynamic pattern matching system. The same hardware resources are used for different filtering tasks by dynamically reconfiguring matching patterns, eliminating the need for separate specialized hardware components
Solution Approach 2:
The system merges DoS detection, QoS enforcement, and standard packet filtering into a unified dynamic filtering framework. By combining these functions into a single adaptive pattern matching engine, the patent reduces device complexity while maintaining all required functionalities through shared hardware resources
Data Source
AI summary
A packet processing apparatus includes a static pattern matcher comparing pattern information defining a packet to be filtered with a value regarding at least a part of a received packet, the pattern information being stored by a pattern information manager. A frequency calculator calculates the frequency of matching by the static pattern matcher. A dynamic pattern matcher matches the frequency and a preset comparison value and a processing determiner determines a processing on the received packet based upon the dynamic pattern match.