本文選題：流量檢測(cè) + 流量控制　； 參考：《江西理工大學(xué)》2014年碩士論文

【摘要】：VoIP(Voice over Internet Protocol)是一種新興起的互聯(lián)網(wǎng)通訊技術(shù)。因?yàn)閂oIP具有成本低和開(kāi)放靈活的特點(diǎn)，它對(duì)傳統(tǒng)的電信運(yùn)營(yíng)商產(chǎn)生了巨大的威脅，尤其對(duì)于國(guó)內(nèi)外長(zhǎng)途通話業(yè)務(wù)，已經(jīng)產(chǎn)生了很多的利益損失。由于VoIP能夠帶來(lái)很大的利潤(rùn)以及國(guó)家監(jiān)管放松的原因，很多非法的運(yùn)營(yíng)商開(kāi)始經(jīng)營(yíng)VoIP業(yè)務(wù)，造成傳統(tǒng)電信運(yùn)營(yíng)商的利潤(rùn)減少；國(guó)家對(duì)于PC To Phone業(yè)務(wù)的監(jiān)管還處于未開(kāi)始狀態(tài)，當(dāng)有突發(fā)狀況發(fā)生時(shí)，國(guó)家無(wú)法保證通信系統(tǒng)的安全；很多虛擬運(yùn)營(yíng)商已經(jīng)在國(guó)內(nèi)開(kāi)展業(yè)務(wù)，但是，國(guó)家對(duì)于他們還沒(méi)有開(kāi)始進(jìn)行監(jiān)管，也沒(méi)有相關(guān)的管理經(jīng)驗(yàn)。所以，國(guó)家需要研究相關(guān)的技術(shù)用來(lái)應(yīng)對(duì)VoIP對(duì)于傳統(tǒng)電信運(yùn)營(yíng)商的威脅。 我們需要準(zhǔn)確識(shí)別出網(wǎng)絡(luò)中的VoIP流量才能進(jìn)行管理。本文重點(diǎn)研究了VoIP網(wǎng)絡(luò)流量檢測(cè)的關(guān)鍵技術(shù)，深入分析了多種網(wǎng)絡(luò)流量識(shí)別技術(shù)，對(duì)AC算法進(jìn)行了分析研究，并且在這個(gè)基礎(chǔ)上設(shè)計(jì)實(shí)現(xiàn)了一個(gè)網(wǎng)絡(luò)流量監(jiān)控系統(tǒng)，可以達(dá)到對(duì)VoIP網(wǎng)絡(luò)流量的檢測(cè)和控制。本文的主要內(nèi)容包括下面幾個(gè)部分： (1)研究分析了網(wǎng)絡(luò)流量識(shí)別的關(guān)鍵技術(shù)——DPI(深度包檢測(cè)技術(shù))和DFI(深度/動(dòng)態(tài)流檢測(cè)技術(shù))，比較了這兩種流量檢測(cè)技術(shù)的優(yōu)缺點(diǎn)，并合理利用兩種技術(shù)的結(jié)合來(lái)實(shí)現(xiàn)網(wǎng)絡(luò)流量的識(shí)別。然后也研究了網(wǎng)絡(luò)流量的控制技術(shù)，對(duì)網(wǎng)絡(luò)流量控制技術(shù)進(jìn)行了比較分析。 (2)對(duì)DPI技術(shù)的理論基礎(chǔ)——模式匹配算法進(jìn)行了研究，重點(diǎn)研究了AC自動(dòng)機(jī)算法，，分析了AC自動(dòng)機(jī)在DPI檢測(cè)中的應(yīng)用。 (3)在研究分析網(wǎng)絡(luò)流量識(shí)別和控制的關(guān)鍵技術(shù)之后，提出了一種基于DPI的網(wǎng)絡(luò)流量識(shí)別和控制技術(shù)解決方案，設(shè)計(jì)實(shí)現(xiàn)了一種網(wǎng)絡(luò)流量識(shí)別和控制系統(tǒng)，詳細(xì)分析了流量識(shí)別模塊的實(shí)現(xiàn)、識(shí)別引擎的工作原理以及數(shù)據(jù)包的檢測(cè)方式，并介紹了DPI特征庫(kù)，最后對(duì)系統(tǒng)的網(wǎng)絡(luò)部署方案做了詳細(xì)的介紹，提出了一種改進(jìn)的網(wǎng)絡(luò)部署方案。 (4)該網(wǎng)絡(luò)流量監(jiān)控系統(tǒng)需要定期升級(jí)特征庫(kù)，用來(lái)應(yīng)對(duì)網(wǎng)絡(luò)技術(shù)的快速發(fā)展。經(jīng)過(guò)測(cè)試，該系統(tǒng)網(wǎng)絡(luò)流量識(shí)別率高，能夠識(shí)別出一百多種VoIP網(wǎng)絡(luò)應(yīng)用軟件，對(duì)VoIP流量的阻斷測(cè)試也很成功，該系統(tǒng)在穩(wěn)定性和可用性上表現(xiàn)良好。
[Abstract]:VoIP Voice over Internet Protocol is a new Internet communication technology. Because VoIP has the characteristics of low cost and open and flexible, it poses a great threat to traditional telecom operators, especially for long-distance call services at home and abroad, which has caused a lot of loss of interest. Because VoIP can bring great profits and the state regulation is relaxed, many illegal operators begin to operate VoIP business, resulting in a decrease in the profits of traditional telecom operators, and the state regulation of PC to phone business is still in a state of not beginning. When an emergency occurs, the state cannot guarantee the security of the communication system; many virtual operators already operate in China, but the state has not started to regulate them, nor has the relevant management experience. Therefore, the state needs to study the relevant technologies to deal with VoIP threats to traditional telecom operators. We need to accurately identify VoIP traffic in the network to manage. This paper focuses on the key technologies of VoIP network traffic detection, deeply analyzes various network traffic identification technologies, analyzes the AC algorithm, and designs and implements a network traffic monitoring system on this basis. Can achieve VoIP network traffic detection and control. The main contents of this paper include the following parts: 1) the key technologies of network traffic identification, DPI (depth packet detection) and DFI (depth / dynamic flow detection), are analyzed and compared. The advantages and disadvantages of the detection technology, And reasonable use of the combination of the two technologies to achieve network traffic identification. Then, the control technology of network traffic is studied, and the network traffic control technology is compared and analyzed. (2) the pattern matching algorithm, which is the theoretical foundation of DPI technology, is studied, and the AC automata algorithm is studied emphatically. This paper analyzes the application of AC automata in DPI detection. After studying and analyzing the key technologies of network traffic identification and control, a solution of network traffic identification and control technology based on DPI is proposed. A network traffic identification and control system is designed and implemented. The realization of the flow identification module, the working principle of the identification engine and the detection method of the data packet are analyzed in detail, and the DPI signature library is introduced. Finally, the network deployment scheme of the system is introduced in detail, and an improved network deployment scheme is proposed. 4) the network traffic monitoring system needs to update the signature library periodically to cope with the rapid development of network technology. The network traffic identification rate of the system is high and more than 100 kinds of VoIP network applications can be identified. The VoIP traffic blocking test is also successful. The system performs well in stability and availability.
【學(xué)位授予單位】：江西理工大學(xué)
【學(xué)位級(jí)別】：碩士
【學(xué)位授予年份】：2014
【分類(lèi)號(hào)】：TP393.06

【參考文獻(xiàn)】

相關(guān)期刊論文 前10條

1 陳慶章;邵奔;陳超;;基于復(fù)合特征的P2P業(yè)務(wù)識(shí)別系統(tǒng)的研究與實(shí)現(xiàn)[J];東南大學(xué)學(xué)報(bào)(自然科學(xué)版);2008年S1期

2 王芳;李君;張順頤;;Skype流量識(shí)別研究[J];廣東通信技術(shù);2007年08期

3 孫知信;張玉峰;;基于多維支持向量機(jī)的P2P網(wǎng)絡(luò)流量識(shí)別模型[J];吉林大學(xué)學(xué)報(bào)(工學(xué)版);2010年05期

4 王春剛;王會(huì);楊家海;;P2P技術(shù)分析與流量管理研究[J];計(jì)算機(jī)科學(xué);2010年04期

5 宋明秋;張國(guó)權(quán);鄧貴仕;;入侵檢測(cè)多模式匹配算法[J];計(jì)算機(jī)工程;2006年05期

6 孫知信;宮婧;;一種基于流特性描述的P2P流量模糊識(shí)別方法[J];計(jì)算機(jī)學(xué)報(bào);2008年07期

7 畢夏安;張大方;謝鯤;牟曉玲;;基于H.323協(xié)議的VoIP語(yǔ)音流量識(shí)別[J];計(jì)算機(jī)應(yīng)用;2008年09期

8 陳敏;張廣興;畢經(jīng)平;;基于SIP的VoIP流量識(shí)別方法研究[J];計(jì)算機(jī)應(yīng)用研究;2007年04期

9 楊曉波;;非法VoIP檢測(cè)技術(shù)的應(yīng)用研究[J];計(jì)算機(jī)應(yīng)用與軟件;2009年02期

10 陳亮;龔儉;;基于卡方統(tǒng)計(jì)的應(yīng)用協(xié)議流量行為特征分析方法[J];軟件學(xué)報(bào);2010年11期

本文編號(hào)：2041408