本文選題：指紋特征 + Jaccard參數(shù)��； 參考：《電子科技大學(xué)》2014年碩士論文

【摘要】：無線網(wǎng)絡(luò)以其靈活性、移動性強(qiáng)等特點(diǎn)已經(jīng)快速充斥了人們的日常生活,隨之而來的無線網(wǎng)絡(luò)安全需求也日漸增高。由于無線網(wǎng)絡(luò)的安全問題受到更多的關(guān)注,無線網(wǎng)絡(luò)的安全監(jiān)管和優(yōu)化勢在必行。針對無線網(wǎng)絡(luò)環(huán)境中,專有的、非公開協(xié)議的頻繁使用,以及無線網(wǎng)絡(luò)環(huán)境下通信的隱蔽性和無線網(wǎng)絡(luò)協(xié)議的脆弱性等安全問題,本文基于協(xié)議逆向工程的基本思想,提出了無線網(wǎng)絡(luò)環(huán)境下未知協(xié)議指紋特征識別與分析的方法,希望通過對無線網(wǎng)絡(luò)環(huán)境中的通信協(xié)議進(jìn)行識別分析,實(shí)現(xiàn)無線網(wǎng)絡(luò)安全性檢測,及時發(fā)現(xiàn)安全問題。在無線網(wǎng)絡(luò)環(huán)境下實(shí)現(xiàn)未知協(xié)議識別,首先需要從無線比特流數(shù)據(jù)中完整的提取數(shù)據(jù)幀,其次需要在提取的數(shù)據(jù)幀中提取正確的協(xié)議特征信息,最后,恰當(dāng)?shù)拿枋鎏崛〉膮f(xié)議指紋特征也是非常關(guān)鍵的。針對這些關(guān)鍵問題,本文設(shè)計了基于前導(dǎo)碼識別的數(shù)據(jù)幀切分、基于關(guān)鍵字的協(xié)議特征信息提取和基于有限自動機(jī)的指紋特征描述模型這三個解決方案,分別用于解決上述關(guān)鍵問題。在基于前導(dǎo)碼識別的數(shù)據(jù)幀切分中,通過改進(jìn)AC算法和頻繁序列的位置拼接,生成前導(dǎo)碼候選集來完成數(shù)據(jù)幀的切分。在基于關(guān)鍵字的協(xié)議特征信息提取中,特征關(guān)鍵字的生成是其中的關(guān)鍵技術(shù),本文通過數(shù)據(jù)單元切分、Jaccard參數(shù)篩選和數(shù)據(jù)報重放來保證生成正確的特征關(guān)鍵字。在基于有限狀態(tài)自動機(jī)的協(xié)議指紋特征描述模型中,協(xié)議特征描述模型和狀態(tài)描述模型可以完整的、有序的將協(xié)議特征信息和狀態(tài)信息組合成一個整體,可以包含協(xié)議的所有類型特征,保證協(xié)議的完全識別。為了驗(yàn)證未知協(xié)議指紋特征識別技術(shù)的正確性,本文定義了一系列評價指標(biāo),并制定了相應(yīng)實(shí)驗(yàn)對識別技術(shù)的每一個步驟進(jìn)行了驗(yàn)證和評估分析。通過評價實(shí)驗(yàn)可以看出,使用未知協(xié)議指紋特征描述模型識別協(xié)議可以達(dá)到100%的準(zhǔn)確率和召回率,說明了本文提出的未知協(xié)議指紋特征識別技術(shù)可以正確的提取協(xié)議的指紋特征信息,并完成協(xié)議識別工作。
[Abstract]:Wireless network with its flexibility, strong mobility and other characteristics has rapidly flooded people's daily life, followed by a growing demand for wireless network security. As the security of wireless network is paid more attention, it is imperative to supervise and optimize the security of wireless network. In view of the frequent use of proprietary, non-public protocols in wireless network environment, the concealment of communication in wireless network environment and the vulnerability of wireless network protocols, this paper bases on the basic idea of protocol reverse engineering. In this paper, a method of fingerprint feature recognition and analysis of unknown protocols in wireless network environment is proposed. It is hoped that wireless network security detection can be realized by identifying and analyzing communication protocols in wireless network environment, and security problems can be found in time. In order to realize unknown protocol recognition in wireless network environment, first of all, we need to extract the complete data frame from the wireless bit stream data, secondly, we need to extract the correct protocol characteristic information from the extracted data frame. Proper description of extracted protocol fingerprint features is also critical. Aiming at these key problems, this paper designs three solutions: data frame segmentation based on preamble recognition, protocol feature information extraction based on keywords and fingerprint feature description model based on finite automata. They are used to solve the above key problems. In the data frame segmentation based on preamble recognition, by improving the AC algorithm and the position splicing of frequent sequences, the preamble candidate set is generated to complete the data frame segmentation. The generation of feature keywords is the key technology in feature information extraction based on keywords. In this paper, Jaccard parameter filtering and Datagram replay are used to ensure the generation of correct feature keywords. In the protocol fingerprint feature description model based on finite state automata, the protocol feature description model and the state description model can integrate the protocol feature information and the state information into a whole. Can include all types of characteristics of the protocol to ensure full recognition of the protocol. In order to verify the correctness of the fingerprint feature recognition technology of unknown protocols, a series of evaluation indexes are defined, and corresponding experiments are made to verify and evaluate each step of the technology. Through the evaluation experiment, we can see that the accuracy and recall rate can reach 100% by using the unknown protocol to describe the model recognition protocol. It is shown that the unknown protocol fingerprint feature recognition technology proposed in this paper can correctly extract the fingerprint feature information of the protocol and complete the protocol recognition work.
【學(xué)位授予單位】：電子科技大學(xué)
【學(xué)位級別】：碩士
【學(xué)位授予年份】：2014
【分類號】：TN915.08;TP391.41

【參考文獻(xiàn)】

相關(guān)期刊論文 前1條

1 秦亮曦;史忠植;;關(guān)聯(lián)規(guī)則研究綜述[J];廣西大學(xué)學(xué)報(自然科學(xué)版);2005年04期

相關(guān)碩士學(xué)位論文 前1條

1 沈斌;基于分詞的中文文本相似度計算研究[D];天津財經(jīng)大學(xué);2006年

，

本文編號：2075184