Elephant Flow Detection Algorithm Based on Lowest Rate Eviction Integrated with d-Left Hash
-
摘要: 网络中少量较高速率和较大数据量的流生成了网络的大部分流量；利用有限的存储空间有效地识别出这些数据流，对实施流量工程、缓解网络拥塞、改善网络传输具有非常重要的意义.随着网络技术的发展，传输链路的带宽容量和数据流的传输速率越来越高.具有高速报文转发能力的网络设备对数据流检测算法的处理提出了高的性能要求.将超过一定的数据量和传输速率的数据流定义为大流，提出了将低速流淘汰与d-Left散列表存储结构相结合的大流检测算法.为了满足高速网络传输的性能需求，使用d-Left散列表存储流检测的数据结构，将d-Left散列表的存储结构与流缓存替换相结合以实现高效的大流检测.通过低速率的淘汰,提高了检测算法的准确性.基于真实网络数据的测试结果表明：所提算法在相近的存储开销下保持了高的处理性能，其准确性优于LRU派生算法S-LRU和L-LRU以及CSS和WCSS检测算法.Abstract: A small percentage of high rate large-sized flows consume most of the network bandwidth. It is of great significance to efficiently identify these flows for traffic engineering, so as to alleviate network congestion and improve network transport performance. With the development of network technology, the capacity of transmission links and the transfer rate of data flows become higher and higher. So the network equipment with high-speed packets forwarding capability put forward high performance requirements for flows identifying algorithms. The flows whose size and transmission rate both exceed certain thresholds are usually defined as elephant flows. In this paper, a novel algorithm is proposed for elephant flow detection, in which the data structure of flow entries is indexed by d-Left Hash table to meet the performance requirements of high speed packet processing. The proposed detection algorithm combines the d-Left Hash data structure with the eviction of low-rate flows’ entries in order to identify elephant flows efficiently. The accuracy of the proposed detection algorithm is improved by the eviction of low rate flows’ entries. Theoretical analysis is conducted to demonstrate the accuracy, performance and memory overhead of the proposed detection algorithm. Experimental results on real data sets show that the proposed algorithm outperforms CSS, WCSS, S-LRU and L-LRU algorithms in terms of accuracy and performance at comparable memory overhead.
-
Keywords:
- elephant flow detection /
- d-Left Hash /
- transmission rate /
- cache eviction /
- high speed networks
-
-
期刊类型引用(10)
1. 杨秀璋，彭国军，刘思德，田杨，李晨光，傅建明. 面向APT攻击的溯源和推理研究综述. 软件学报. 2025(01): 203-252 . 
百度学术
2. 申国霞，常鑫. 基于可信密码模块的网络信道潜在攻击挖掘. 信息技术. 2023(10): 152-156+162 . 百度学术
3. 谢峥，路广平，付安民. 一种可扩展的实时多步攻击场景重构方法. 信息安全研究. 2023(12): 1173-1179 . 百度学术
4. 黄维贵，孙怡峰，欧旺，王玉宾. 基于不确定攻击图的违规外联风险分析. 信息工程大学学报. 2022(05): 570-577 . 百度学术
5. 王文娟，杜学绘，单棣斌. 基于动态概率攻击图的云环境攻击场景构建方法. 通信学报. 2021(01): 1-17 . 百度学术
6. 潘亚峰，朱俊虎，周天阳. APT攻击场景重构方法综述. 信息工程大学学报. 2021(01): 55-60+80 . 百度学术
7. 罗智勇，杨旭，刘嘉辉，许瑞. 基于贝叶斯攻击图的网络入侵意图分析模型. 通信学报. 2020(09): 160-169 . 百度学术
8. 王硕，王建华，汤光明，裴庆祺，张玉臣，刘小虎. 一种智能高效的最优渗透路径生成方法. 计算机研究与发展. 2019(05): 929-941 . 本站查看
9. 吴东，郭春，申国伟. 一种基于多因素的告警关联方法. 计算机与现代化. 2019(06): 30-37 . 百度学术
10. 韩宜轩，秦元庆. 基于因果关联的电力工控系统攻击场景还原. 信息技术. 2019(08): 41-44+48 . 百度学术
其他类型引用(12)
计量
- 文章访问数: 926
- HTML全文浏览量: 0
- PDF下载量: 321
- 被引次数: 22
下载:
