Professional Documents
Culture Documents
DPI
2009 3
DPI
1.
........................................................................................................................................... 2
2.
DPI ................................................................................................................................... 2
3.
2.1.
....................................................................... 3
2.2.
................................................................................... 3
DPI ................................................................................................................................... 4
3.1.
3.2.
DFA ............................................................................. 5
3.3.
3.4.
4.
3.2.1.
->NFA ........................................................................................... 5
3.2.2.
NFA->DFA ....................................................................................................... 6
3.2.3.
DFA ...................................................................................................... 7
........................................................................................................... 8
3.3.1.
................................................................................................... 8
3.3.2.
................................................................................... 8
DFA .............................................................................................................. 9
........................................................................................................................................... 9
-I-
Internet
.
P2P BitTorrenteMule P2P
SkypeQQ 80
DPI
IP QoS IP 5Tuples,
IP
QoS IP
DPI
IP TCP UDP DPI
IP OSI7
Bit
DPI
DPI
(Regular Expression)
DPI 16 DPI
DPI
regular expression
DPI
DPI DPI
DPI
DPI
DPI
DPI DPI
NFA DPI DFA
NFA
NFA DFA
NFANon-deterministic finite automaton
Regex-Directed DFADeterministic finite automaton
Text-Directed
to(nite|knight|night)NFA to
component nite, knight night
DFA
to k n k
knigth i t g
DFA NFA
NFA trace multiple possible routes through
the NFANFA Backtrack
Backtrack Backtrack NFA
DFADFA
NFA DFA .
DFA
NFA NFA NFA DFA
NFA
DFA
DFA
->NFA
S 0S | 1S | 1A | 0B
A 1C | 1
B 0C | 0
C 0C | 1C | 0 | 1
NFA
1
Z
2 A cB A C c
3 A c A Z c
NFA->DFA
NFA
{q1,q2,qk}
DFA
w DFA NFA
w NFA DFA
L(M1)=L(M2)
NFA DFA
S
S {S}{S}
S0
{S}
{S,B}
{S,A}
S1
{S,B}
{S,B,C,Z}
{S,A}
S2
{S,A}
{S,B}
{S,A,C,Z}
S3
{S,B,C,Z}
{S,B,C,Z}
{S,A,C,Z}
S4
{S,A,C,Z}
{S,B,C,Z}
{S,A,C,Z}
DFA
DFA NFA
1DFA M M=( K,, f , S , Z):K
, ,SK,
;Z Kf KK f(ki,a)=kj,(kiK,kjK)
ki a kj
2 ,;
3 s t , :(a)
s t ;(b) s t
DFAM
DFAM DFA DFA
DFA DFA
I0
I1
I0 0 S0 S1 S2 S1 S1 S3 S1
I0 S3 I1 S1 S0 S2
I0={ S0 ,S2} I1={ S3 ,S4} I2 { S1 } I0 1
S0 S2 S2 S4 S2 I 0 ,S4I 1 S2 S4
I1 0 S3 S3 I1 S4 S3 I1 1
S3 S4 I1 S3 S4 I1 I1
Ii ( I=0,1,)
DPI
Others
DPI
HTTP DPI
DFA
DFA
One-Pass Scan
Repeated Scan
One-Pass
Repeated Scan
DPI (QoS)
()
DPI
600 P2PIM
/VoIP
DPI