發(fā)布時間：2018-06-23 19:58

  本文選題：計算機網(wǎng)絡(luò) + 攻擊流量樣本��； 參考：《北京郵電大學(xué)》2017年碩士論文

【摘要】：攻擊流量生成對于網(wǎng)絡(luò)安全研究和網(wǎng)絡(luò)設(shè)備評估具有重要意義。就現(xiàn)階段攻擊流量生成領(lǐng)域的研究而言,流量生成手段局限于單一代碼構(gòu)造和建模式構(gòu)造兩種,然而單一代碼構(gòu)造存在攻擊流量單一和流量速度低的缺陷,相對的通過建模來構(gòu)造攻擊流量技術(shù)手段則還不夠成熟,無法找到一個有效的數(shù)學(xué)模型對不同攻擊流量進行建模。而本文介紹的攻擊流量生成系統(tǒng)依賴于原始攻擊流量樣本,只要攻擊流量樣本足夠豐富,本系統(tǒng)就能生成復(fù)雜的攻擊流量。并且在流量生成領(lǐng)域,本文介紹的系統(tǒng)也能發(fā)揮重要作用。隨著網(wǎng)絡(luò)設(shè)備性能不斷提升,對測試流量大小也有著相應(yīng)提高,然而現(xiàn)階段流量生成系統(tǒng)分為兩類,基于硬件的流量生成系統(tǒng)價格昂貴,基于軟件的系統(tǒng)則最大速率上無法滿足當前需求。本系統(tǒng)生成的網(wǎng)絡(luò)流量可達到萬兆網(wǎng)卡極限速率,并且能夠根據(jù)需求進行高精度流速控制,以達到個性化測試需求。本文提出了一種高速流量生成系統(tǒng),可用于攻擊流量生成過程。攻擊流量生成系統(tǒng)通過捕獲的流量樣本文件來實現(xiàn)攻擊流量的生成過程,采用拷貝者和發(fā)送的協(xié)同合作實現(xiàn)線程并發(fā)式的流量發(fā)送模型,同時通過高精度的時間控制系統(tǒng)和流量控制算法來控制流量發(fā)送的精度。在整個生成過程中,分析了流量數(shù)據(jù)結(jié)構(gòu),以及設(shè)計了流量在內(nèi)存中的數(shù)據(jù)流和處理流。最后,通過實驗?zāi)M對比成熟的流量生成系統(tǒng),從結(jié)果數(shù)據(jù)層面反應(yīng)了本系統(tǒng)的優(yōu)越性。
[Abstract]:Attack traffic generation is of great significance for network security research and network equipment evaluation. As far as the research of attack traffic generation is concerned at present, traffic generation methods are limited to single code construction and construction pattern construction. However, single code construction has the defects of single attack traffic and low traffic speed. Relatively, it is not mature enough to construct attack traffic by modeling, and it is impossible to find an effective mathematical model to model different attack traffic. The attack traffic generation system introduced in this paper relies on the original attack traffic samples, so long as the attack traffic samples are abundant enough, the system can generate complex attack traffic. And in the field of traffic generation, the system introduced in this paper can also play an important role. With the continuous improvement of network equipment performance, there is a corresponding increase in the size of test traffic. However, traffic generation systems are divided into two categories at the present stage, and the hardware based traffic generation system is expensive. Software-based systems cannot meet current requirements at maximum rate. The network flow generated by the system can reach the limit rate of the ten thousand megabit network card and can be controlled with high precision according to the demand to achieve the individualized test demand. This paper presents a high-speed traffic generation system, which can be used to generate attack traffic. The attack traffic generation system realizes the attack traffic generation process by capturing the traffic sample files, and implements the thread concurrent traffic sending model by the cooperation of copy and send. At the same time, the accuracy of traffic transmission is controlled by high precision time control system and flow control algorithm. In the whole generation process, the data structure of traffic is analyzed, and the data flow and processing flow of traffic in memory are designed. Finally, the superiority of the system is reflected from the result data level by comparing the mature flow generation system with experimental simulation.
【學(xué)位授予單位】：北京郵電大學(xué)
【學(xué)位級別】：碩士
【學(xué)位授予年份】：2017
【分類號】：TP393.08

【參考文獻】

相關(guān)期刊論文 前6條

1 周玉瀚;韓國棟;沈劍良;姜奎;;基于Rent規(guī)則的片上網(wǎng)絡(luò)局部化特性流量生成算法[J];計算機應(yīng)用;2016年05期

2 趙曉輝;李昀義;王曉婷;郭華儉;王憶文;;面向交換機驗證測試的流量生成器研究與實現(xiàn)[J];微處理機;2015年04期

3 曹龍江;張勖;王錕;王東濱;吳可欣;張俊輝;;網(wǎng)絡(luò)應(yīng)用流量模擬技術(shù)[J];軟件;2015年02期

4 褚偉波;蔡忠閩;管曉宏;陳明旭;;基于收發(fā)平衡判定的TCP流量回放方法[J];計算機學(xué)報;2009年04期

5 王永杰;鮮明;陳志杰;王國玉;;一種網(wǎng)絡(luò)攻擊流量生成器的設(shè)計與實現(xiàn)[J];計算機科學(xué);2007年02期

6 權(quán)東曉,裴昌幸,朱暢華,劉格非;基于Libnet的網(wǎng)絡(luò)流量產(chǎn)生器的設(shè)計與實現(xiàn)[J];現(xiàn)代電子技術(shù);2005年20期

，

本文編號：2058222