本文選題：計(jì)算機(jī)網(wǎng)絡(luò) + 攻擊流量樣本　； 參考：《北京郵電大學(xué)》2017年碩士論文

【摘要】：攻擊流量生成對(duì)于網(wǎng)絡(luò)安全研究和網(wǎng)絡(luò)設(shè)備評(píng)估具有重要意義。就現(xiàn)階段攻擊流量生成領(lǐng)域的研究而言,流量生成手段局限于單一代碼構(gòu)造和建模式構(gòu)造兩種,然而單一代碼構(gòu)造存在攻擊流量單一和流量速度低的缺陷,相對(duì)的通過(guò)建模來(lái)構(gòu)造攻擊流量技術(shù)手段則還不夠成熟,無(wú)法找到一個(gè)有效的數(shù)學(xué)模型對(duì)不同攻擊流量進(jìn)行建模。而本文介紹的攻擊流量生成系統(tǒng)依賴(lài)于原始攻擊流量樣本,只要攻擊流量樣本足夠豐富,本系統(tǒng)就能生成復(fù)雜的攻擊流量。并且在流量生成領(lǐng)域,本文介紹的系統(tǒng)也能發(fā)揮重要作用。隨著網(wǎng)絡(luò)設(shè)備性能不斷提升,對(duì)測(cè)試流量大小也有著相應(yīng)提高,然而現(xiàn)階段流量生成系統(tǒng)分為兩類(lèi),基于硬件的流量生成系統(tǒng)價(jià)格昂貴,基于軟件的系統(tǒng)則最大速率上無(wú)法滿足當(dāng)前需求。本系統(tǒng)生成的網(wǎng)絡(luò)流量可達(dá)到萬(wàn)兆網(wǎng)卡極限速率,并且能夠根據(jù)需求進(jìn)行高精度流速控制,以達(dá)到個(gè)性化測(cè)試需求。本文提出了一種高速流量生成系統(tǒng),可用于攻擊流量生成過(guò)程。攻擊流量生成系統(tǒng)通過(guò)捕獲的流量樣本文件來(lái)實(shí)現(xiàn)攻擊流量的生成過(guò)程,采用拷貝者和發(fā)送的協(xié)同合作實(shí)現(xiàn)線程并發(fā)式的流量發(fā)送模型,同時(shí)通過(guò)高精度的時(shí)間控制系統(tǒng)和流量控制算法來(lái)控制流量發(fā)送的精度。在整個(gè)生成過(guò)程中,分析了流量數(shù)據(jù)結(jié)構(gòu),以及設(shè)計(jì)了流量在內(nèi)存中的數(shù)據(jù)流和處理流。最后,通過(guò)實(shí)驗(yàn)?zāi)M對(duì)比成熟的流量生成系統(tǒng),從結(jié)果數(shù)據(jù)層面反應(yīng)了本系統(tǒng)的優(yōu)越性。
[Abstract]:Attack traffic generation is of great significance for network security research and network equipment evaluation. As far as the research of attack traffic generation is concerned at present, traffic generation methods are limited to single code construction and construction pattern construction. However, single code construction has the defects of single attack traffic and low traffic speed. Relatively, it is not mature enough to construct attack traffic by modeling, and it is impossible to find an effective mathematical model to model different attack traffic. The attack traffic generation system introduced in this paper relies on the original attack traffic samples, so long as the attack traffic samples are abundant enough, the system can generate complex attack traffic. And in the field of traffic generation, the system introduced in this paper can also play an important role. With the continuous improvement of network equipment performance, there is a corresponding increase in the size of test traffic. However, traffic generation systems are divided into two categories at the present stage, and the hardware based traffic generation system is expensive. Software-based systems cannot meet current requirements at maximum rate. The network flow generated by the system can reach the limit rate of the ten thousand megabit network card and can be controlled with high precision according to the demand to achieve the individualized test demand. This paper presents a high-speed traffic generation system, which can be used to generate attack traffic. The attack traffic generation system realizes the attack traffic generation process by capturing the traffic sample files, and implements the thread concurrent traffic sending model by the cooperation of copy and send. At the same time, the accuracy of traffic transmission is controlled by high precision time control system and flow control algorithm. In the whole generation process, the data structure of traffic is analyzed, and the data flow and processing flow of traffic in memory are designed. Finally, the superiority of the system is reflected from the result data level by comparing the mature flow generation system with experimental simulation.
【學(xué)位授予單位】：北京郵電大學(xué)
【學(xué)位級(jí)別】：碩士
【學(xué)位授予年份】：2017
【分類(lèi)號(hào)】：TP393.08

【參考文獻(xiàn)】

相關(guān)期刊論文 前6條

1 周玉瀚;韓國(guó)棟;沈劍良;姜奎;;基于Rent規(guī)則的片上網(wǎng)絡(luò)局部化特性流量生成算法[J];計(jì)算機(jī)應(yīng)用;2016年05期

2 趙曉輝;李昀義;王曉婷;郭華儉;王憶文;;面向交換機(jī)驗(yàn)證測(cè)試的流量生成器研究與實(shí)現(xiàn)[J];微處理機(jī);2015年04期

3 曹龍江;張勖;王錕;王東濱;吳可欣;張俊輝;;網(wǎng)絡(luò)應(yīng)用流量模擬技術(shù)[J];軟件;2015年02期

4 褚偉波;蔡忠閩;管曉宏;陳明旭;;基于收發(fā)平衡判定的TCP流量回放方法[J];計(jì)算機(jī)學(xué)報(bào);2009年04期

5 王永杰;鮮明;陳志杰;王國(guó)玉;;一種網(wǎng)絡(luò)攻擊流量生成器的設(shè)計(jì)與實(shí)現(xiàn)[J];計(jì)算機(jī)科學(xué);2007年02期

6 權(quán)東曉,裴昌幸,朱暢華,劉格非;基于Libnet的網(wǎng)絡(luò)流量產(chǎn)生器的設(shè)計(jì)與實(shí)現(xiàn)[J];現(xiàn)代電子技術(shù);2005年20期

，

本文編號(hào)：2058222