本文選題：P2P　切入點：HTTP　出處：《蘭州大學(xué)》2014年碩士論文

【摘要】：網(wǎng)絡(luò)應(yīng)用在互聯(lián)網(wǎng)技術(shù)及其應(yīng)用的迅猛發(fā)展的背景下,已滲透到商業(yè)活動、國民生活以及工業(yè)生產(chǎn)等各個領(lǐng)域。網(wǎng)絡(luò)技術(shù)進步與網(wǎng)絡(luò)應(yīng)用普及在最大程度方便人們的社會生活的同時又帶來了諸多不安全因素與挑戰(zhàn)。例如：網(wǎng)絡(luò)信息異常繁雜,存在大量色情、暴力、反動、犯罪、欺詐等不安全信息,這些信息都會嚴(yán)重影響公眾利益與社會穩(wěn)定�，F(xiàn)如今互聯(lián)網(wǎng)早已邁入高速信息網(wǎng)絡(luò)時代,傳統(tǒng)的網(wǎng)絡(luò)安全技術(shù)也過渡到了嚴(yán)重的性能瓶頸期。因此,高速網(wǎng)絡(luò)環(huán)境下流量內(nèi)容還原方法的研究具有非常重要的意義。 本文在分析國內(nèi)外研究現(xiàn)狀,以及P2P、HTTP流量內(nèi)容還原在高速網(wǎng)絡(luò)環(huán)境下所面臨技術(shù)難點的基礎(chǔ)上,實現(xiàn)了數(shù)據(jù)采集系統(tǒng),對采集到的數(shù)據(jù)進行統(tǒng)計分析,得到了一些對還原系統(tǒng)設(shè)計與實現(xiàn)具有參考價值的初步結(jié)論。接著,本文對IP分片技術(shù)、TCP流重組技術(shù)進行了深入的研究,并結(jié)合HTTP協(xié)議的特點,改進了TCP流重組思路,減少了對非HTTP流量的還原所造成的不必要的浪費,接著本文提出了一種對P2P傳播視頻進行監(jiān)控審計的方法,該方法可實時檢測到用戶使用快播或BT來觀看的影片信息,并可主動采樣還原出視頻內(nèi)容,來對視頻進行審計。接著本文詳細(xì)的描述了高速網(wǎng)絡(luò)流量內(nèi)容還原系統(tǒng)的設(shè)計與實現(xiàn),其中分HTTP流量內(nèi)容實時還原系統(tǒng)和P2P行為識別及內(nèi)容還原系統(tǒng)兩部分內(nèi)容。 最后,本文在西安交通大學(xué)智能網(wǎng)絡(luò)與網(wǎng)絡(luò)安全教育部重點實驗室搭建了測試平臺,提出了P2P、HTTP流量內(nèi)容還原系統(tǒng)的測試方法,對系統(tǒng)進行了功能測試和性能測試。測試結(jié)果表明系統(tǒng)能夠?qū)?Gbps帶寬高速網(wǎng)絡(luò)流量進行P2P行為捕獲及主動還原、HTTP流量內(nèi)容還原,系統(tǒng)性能達(dá)到預(yù)期目標(biāo)。
[Abstract]:Under the background of the rapid development of Internet technology and its application, network application has penetrated into commercial activities. The progress of network technology and the popularization of network application bring many unsafe factors and challenges to people's social life at the same time. For example, the network information is very complicated. There are a lot of pornographic, violent, reactionary, criminal, fraudulent and other unsafe information that will seriously affect public interest and social stability. Nowadays, the Internet has entered the era of high-speed information network. The traditional network security technology has also made the transition to the serious performance bottleneck period. Therefore, it is of great significance to study the method of traffic content restoration in high-speed network environment. In this paper, based on the analysis of domestic and international research situation, and the technical difficulties of P2PU HTTP traffic content restoration in high-speed network environment, a data acquisition system is implemented, and the collected data are statistically analyzed. Some preliminary conclusions about the design and implementation of the reduction system are obtained. Then, this paper makes a deep research on the IP fragmentation technology and the characteristics of the HTTP protocol, and improves the idea of TCP stream recombination. It reduces the unnecessary waste caused by the restoration of non-#en0# traffic, and then this paper proposes a method of monitoring and auditing P2P spread video. This method can detect the information of videos watched by users using flash or BT in real time. And can take the initiative to sample and restore video content to audit the video. Then this paper describes the design and implementation of high-speed network traffic content restore system in detail. There are two parts: HTTP traffic content real-time restore system, P2P behavior identification system and content restore system. Finally, this paper builds a test platform in the key laboratory of the Ministry of Intelligent Network and Network Security of Xi'an Jiaotong University, and puts forward the testing method of P2PU HTTP traffic content restore system. The test results show that the system can capture the P2P behavior of 1Gbps bandwidth high-speed network traffic and actively restore the content of 1Gbps traffic.
【學(xué)位授予單位】：蘭州大學(xué)
【學(xué)位級別】：碩士
【學(xué)位授予年份】：2014
【分類號】：TP393.06

【參考文獻】

相關(guān)期刊論文 前10條

1 毛謙;;我國光纖通信技術(shù)發(fā)展的現(xiàn)狀和前景[J];電信科學(xué);2006年08期

2 李慧君,李建民,徐鷹;分布式網(wǎng)絡(luò)內(nèi)容監(jiān)控審計系統(tǒng)的設(shè)計與實現(xiàn)[J];華中科技大學(xué)學(xué)報(自然科學(xué)版);2003年S1期

3 孫欽東;管曉宏;周亞東;;網(wǎng)絡(luò)信息內(nèi)容審計研究的現(xiàn)狀及趨勢[J];計算機研究與發(fā)展;2009年08期

4 李春林,李臘元;高速千兆位以太網(wǎng)絡(luò)技術(shù)分析及應(yīng)用[J];計算機工程與應(yīng)用;2002年03期

5 葉進星;翟偉斌;劉寶旭;蔣卓明;許榕生;;基于MPMF算法的高速網(wǎng)絡(luò)內(nèi)容審計系統(tǒng)架構(gòu)[J];計算機工程;2007年14期

6 黃紅桃;彭宏;吳健培;黃劍峰;;基于MSN協(xié)議的網(wǎng)絡(luò)行為審計系統(tǒng)的設(shè)計與實現(xiàn)[J];計算機工程;2007年15期

7 李明偉;張大方;曾彬;黎文偉;;基于有效載荷分析的BT流量識別技術(shù)[J];計算機應(yīng)用;2007年09期

8 陳波;SYN Flood攻擊的原理、實現(xiàn)與防范[J];計算機應(yīng)用研究;2003年12期

9 萬國根,秦志光,劉錦德;網(wǎng)絡(luò)內(nèi)容安全分析及審計技術(shù)研究[J];計算機應(yīng)用研究;2004年01期

10 戴磊;王源;劉科科;;一種主動學(xué)習(xí)式P2P流識別方法[J];計算機應(yīng)用研究;2012年02期

，

本文編號：1668285