Binary Information Press
In this paper, the authors propose a deep packet inspection system based on the MapReduce. The MapReduce which is a parallel distributed programming model developed by Google applies the technology of deep packet inspection. Network protocol analysis technique is invoked to realize detect, effectively reducing the packet number to be matched. Furthermore, cache technology is adopted to store attack signature from database in order to reduce the frequency of reading the rules from library file which improved the detection efficiency.