【摘要】：情報(bào)傳輸網(wǎng)絡(luò)是傳輸情報(bào)信息的主要途徑之一，隨著大量先進(jìn)信息技術(shù)的不斷應(yīng)用，海量信息的蜂擁而至，對(duì)情報(bào)傳輸能力提出了較高的要求。在這樣的背景下分析與處理軍事情報(bào)信息，，使其具有時(shí)效性是重點(diǎn)，故而軍事情報(bào)工作必須具備安全、快速的情報(bào)傳輸能力。 隨著新軍事變革的推進(jìn)，世界各國(guó)都在積極地完善情報(bào)傳輸網(wǎng)絡(luò)。目前我軍情報(bào)傳輸網(wǎng)絡(luò)帶寬有限，而P2P與流媒體等大流量業(yè)務(wù)擠占帶寬資源，因此，急需對(duì)網(wǎng)絡(luò)流量加以控制，保證情報(bào)信息等關(guān)鍵業(yè)務(wù)的實(shí)時(shí)性要求，提高情報(bào)傳輸網(wǎng)絡(luò)的數(shù)據(jù)傳輸能力。 現(xiàn)代作戰(zhàn)，戰(zhàn)場(chǎng)情況瞬息萬(wàn)變，要求指揮也必須快速與及時(shí)，這對(duì)情報(bào)信息傳遞能力提出了更高的要求。要想贏得信息化戰(zhàn)爭(zhēng)，就必須掌握信息優(yōu)勢(shì)，而掌握信息優(yōu)勢(shì)的關(guān)鍵之一就是擁有快速的情報(bào)傳輸能力。伴隨著新軍事變革的推進(jìn)，特別是隨著聯(lián)合作戰(zhàn)、非戰(zhàn)爭(zhēng)軍事行動(dòng)和分布式網(wǎng)絡(luò)化作戰(zhàn)的理論發(fā)展與行為實(shí)踐，新的軍隊(duì)任務(wù)模式不斷對(duì)情報(bào)傳輸能力提出新的要求，因此以美國(guó)為首的世界各軍事大國(guó)都在積極完善情報(bào)傳輸網(wǎng)絡(luò)。 為提高情報(bào)傳輸網(wǎng)絡(luò)帶寬資源的利用率，結(jié)合情報(bào)傳輸網(wǎng)絡(luò)建設(shè)的實(shí)際情況，本文提出了流量控制系統(tǒng)解決方案，并從總體設(shè)計(jì)、總體框架、體系結(jié)構(gòu)、功能模塊以及系統(tǒng)部署模式等方面對(duì)流量控制系統(tǒng)進(jìn)行了設(shè)計(jì)。 針對(duì)隨機(jī)端口、動(dòng)態(tài)端口以及加密數(shù)據(jù)流等問(wèn)題，在對(duì)比分析端口識(shí)別、深度包檢測(cè)（DPI）以及深度/動(dòng)態(tài)流檢測(cè)（DFI）等技術(shù)的基礎(chǔ)上，提出了一種DPDFI聯(lián)合檢測(cè)法，并以此為核心從設(shè)計(jì)目標(biāo)、總體框架、工作流程以及功能模塊等方面設(shè)計(jì)實(shí)現(xiàn)了流量識(shí)別方法；采用多核處理和并行計(jì)算的硬件平臺(tái)，兼顧了執(zhí)行效率。 本文采用流量識(shí)別率測(cè)試實(shí)驗(yàn)，對(duì)流量識(shí)別方法的有效性進(jìn)行驗(yàn)證，結(jié)果顯示該方法與深度包檢測(cè)（DPI）相比，在保持較高效率的基礎(chǔ)上流量識(shí)別率提高了6.63%；為了說(shuō)明該方法的應(yīng)用價(jià)值以及流量控制系統(tǒng)的作用，在實(shí)際網(wǎng)絡(luò)中進(jìn)行了測(cè)試，測(cè)試結(jié)果表明能夠滿足情報(bào)傳輸網(wǎng)絡(luò)的實(shí)際需求。最后本文指出了該方法的不足之處以及下一步的研究方向。
[Abstract]:The information transmission network is one of the main ways to transmit intelligence information. With the continuous application of a large number of advanced information technology, the great demand for information transmission capability is brought forward. In such a background, it is important to analyze and process the military intelligence information, so that the military intelligence work must have the capability of safe and rapid information transmission. With the advancement of the new military reform, all the countries of the world are actively improving the information transmission network At present, the network bandwidth of the information transmission of our army is limited, and the large-flow traffic such as P2P and streaming media is crowded with the bandwidth resources. Therefore, it is in urgent need to control the network traffic and ensure the real-time requirements of key business such as intelligence information, so as to improve the data transmission of the information transmission network. Force. Modern operation, the situation of the battlefield is changing rapidly, and the command must also be fast and timely, which makes the information transfer capability higher In order to win the information war, it is necessary to master the information advantage, and one of the key to the information advantage is to have the fast information transmission With the advance of the new military reform, especially with the theory development and practice of the joint operation, the non-war military operation and the distributed network operation, the new army mission mode has constantly proposed new information transmission capability. As a result, all the military powers of the world, led by the United States, are actively improving the information transfer In order to improve the utilization of the network bandwidth resources of the information transmission and the actual situation of the construction of the information transmission network, this paper presents the solution of the flow control system, and from the overall design, the general framework and the flow control system in aspects of architecture, function module and system deployment mode, and the like A kind of DPDFI combined detection method is put forward on the basis of comparison analysis port identification, deep packet detection (DPI) and depth/ dynamic flow detection (DFI) and so on, based on the technologies such as random port, dynamic port and encrypted data stream. the core is designed to realize the flow identification method from the design goal, the overall framework, the working process and the functional module and the like, and adopts a multi-core processing and parallel computing hardware platform, In this paper, the effectiveness of the flow identification method is verified by the flow rate recognition test. The results show that the method is more efficient than the deep packet detection (DPI). The rate is increased by 6.63%; in order to illustrate the application value of the method and the function of the flow control system, the test is carried out in the actual network, and the test results show that the information can be satisfied The actual demand of the transmission network is pointed out in the last paper.
【學(xué)位授予單位】：吉林大學(xué)
【學(xué)位級(jí)別】：碩士
【學(xué)位授予年份】：2014
【分類號(hào)】：TP393.06

【參考文獻(xiàn)】

相關(guān)期刊論文 前10條

1 楊超;貴穎祺;;網(wǎng)絡(luò)流量分析及控制策略[J];電腦知識(shí)與技術(shù);2011年12期

2 段生林;特征檢測(cè)在入侵檢測(cè)系統(tǒng)中的應(yīng)用[J];華南金融電腦;2004年04期

3 呂效紅;;基于Linux內(nèi)核的BT流量控制的原理與實(shí)現(xiàn)[J];黃山學(xué)院學(xué)報(bào);2010年03期

4 張玉沖;蔡皖東;丁要軍;;一種適用于應(yīng)用層協(xié)議的特征提取算法[J];計(jì)算機(jī)工程;2012年04期

5 陳偉;胡磊;楊龍;;基于載荷特征的加密流量快速識(shí)別方法[J];計(jì)算機(jī)工程;2012年12期

6 楊虎;張大方;謝鯤;雷淵明;何施茗;;Netfilter/Iptables框架下基于TCP滑動(dòng)窗口的串行流量控制算法[J];計(jì)算機(jī)工程與科學(xué);2009年10期

7 陳偉;蘭巨龍;張建輝;;基于端點(diǎn)特征的P2P流媒體識(shí)別方法[J];計(jì)算機(jī)應(yīng)用研究;2012年07期

8 曾武;張國(guó)兵;黃皓;;基于網(wǎng)絡(luò)處理器的防火墻流量控制技術(shù)[J];計(jì)算機(jī)應(yīng)用研究;2006年11期

9 林志興;;校園網(wǎng)絡(luò)流量控制分析與實(shí)施[J];三明學(xué)院學(xué)報(bào);2009年04期

10 朱國(guó)勝;余少華;;高速低功耗深度報(bào)文檢測(cè)方法[J];通信學(xué)報(bào);2011年04期

本文編號(hào)：2443075