局域网环境下设备侦测及封锁技术的设计与实现

发布时间：2017-12-26 23:08

本文关键词：局域网环境下设备侦测及封锁技术的设计与实现　出处：《苏州大学》2016年硕士论文　论文类型：学位论文

【摘要】：当前网络及计算机技术发展迅速,人们的生活和工作中越来越依赖于网络和计算机终端设备,但随着网络和计算机终端设备的日益发展和普及,各种依赖于网络攻击和计算机终端的窃密行为,也在严重威胁着人们的信息财产安全,对如何防范和阻止使用计算机和网络窃密行为的研究有着非常迫切的现实意义。本文基于如何完善局域网环境终端设备管理为背景,说明介绍基于ARP封包相关技术为核心的局域网设备侦测和封锁的技术的相关设计和研究的成果。本文主要完成了以下3个方面的工作:1.针对当前局域网环境下网络安全及相关防御措施,在通过对SNMP/ARP等网络协议的研究基础上,提出并实现了一种基于ARP缓存和ARP封包完成终端设备侦测和封锁的技术;2.针对较大型局域网可能会有多个子网的状况,本文利用Django框架的MTV架构,设计了一种“1+N”模式的系统架构,可以实现统一的管理平台和多子网系统的部署;3.本文将侦测和封锁相关技术,进行了产品化的设计,通过使用python语言进行了模块化设计和封装,使本文设计的系统可以在多子网环境中进行类似产品化的部署和使用,实现企业局域网的集中管控。这种技术和架构设计对局域网中风险设备的管控有较高的实用价值。
[Abstract]:The rapid development of network and computer technology, more and more people's life and work is dependent on the network and computer terminal equipment, but with the development of network and computer terminal equipment and the popularity of theft behavior depends on various network attacks and computer terminal, is also a serious threat to people's property information, on how to prevent and stop the use of computer and network QieMi behavior is very urgent. Based on how to improve the management of terminal devices in LAN environment, this paper introduces the design and research results of LAN device detection and blockade technology based on ARP packet technology. This paper mainly completed the following 3 aspects: 1. in view of the current LAN network security and defense measures, through the basic research on SNMP/ARP network protocol, and proposes a ARP cache and ARP packet based on the completion of the terminal equipment to detect and blocking technology; 2. for large LAN may there will be multiple sub networks, using the Django framework of the MTV architecture, design the system architecture of a "1+N" mode, can achieve a unified management platform and multi subnet deployment system; 3. the detection and blocking technology, the design of the product, through the use of Python language module design and package, so that this system can make the deployment and use of similar products in multisubnet environment, realize the centralized management of enterprise lan. The design of this technology and architecture is of high practical value for the management and control of the risk equipment in the LAN.
【学位授予单位】：苏州大学
【学位级别】：硕士
【学位授予年份】：2016
【分类号】：TP393.1

【参考文献】