基于小波分析的NTP放大反射攻击检测与防御研究

发布时间：2018-03-14 04:26

本文选题：NTP攻击　切入点：放大反射攻击　出处：《河北大学》2017年硕士论文　论文类型：学位论文

【摘要】：随着互联网在社会发展中的广泛应用,以及信息技术迅猛发展,社会上出现很多信息安全事件,网络安全情况愈来愈严重。近几年,网络上出现多起NTP放大反射攻击事件,且该种攻击发生频率越来越大,攻击流量也越来越高。面对社会上频繁发生的各种网络攻击事件,网络安全分析人员及网络维护人员急需寻找更优秀的、效果更好的方法和产品来识别和防护网络安全,以更好地方式解决网络攻击事件,维护良好的互联网环境。本文以NTP放大反射攻击为研究对象,以NTP攻击检测和防御理论为指导,通过分析NTP放大反射攻击的原理,寻找更科学、更有效的NTP放大反射攻击检测技术,并在此检测方法基础上构建NTP放大反射攻击检测防御模型,意在帮助网络安全分析人员大大提高网络攻击检测速度,并给网络安全维护人员提供更完善的NTP放大反射攻击解决方案,维护网络安全。本文针对提出的模型搭建实验环境通过模拟NTP放大反射攻击实验来验证本文方法的有效性,实验结果发现本文提出的基于小波分析的NTP放大反射攻击检测方法是有效且可靠的,并且实验也说明本文提出的NTP放大反射攻击防御措施可以清晰的区分开正常流量和攻击流量,并在保证正常数据流的可用带宽的前提下较好的完成了其防御任务。
[Abstract]:With the wide application of the Internet in the social development and the rapid development of information technology, there are many information security incidents in the society, and the network security situation is becoming more and more serious. In recent years, there have been many NTP amplification reflection attacks on the network. In the face of the frequent attacks in the society, network security analysts and network maintainers urgently need to find better ones. More effective methods and products to identify and protect network security, to better resolve network attacks, to maintain a good Internet environment. Guided by the theory of NTP attack detection and defense, by analyzing the principle of NTP amplification reflection attack, we find a more scientific and effective NTP amplification reflection attack detection technology. On the basis of this detection method, the defense model of NTP amplification reflection attack detection is constructed, which is intended to help network security analysts greatly improve the speed of network attack detection. It also provides network security maintainers with a more perfect solution to NTP amplification reflection attack and maintains network security. This paper builds an experimental environment for the proposed model to verify the effectiveness of this method by simulating the NTP amplification reflection attack experiment. The experimental results show that the wavelet analysis based detection method for NTP amplification attack is effective and reliable. The experiments also show that the defense measures proposed in this paper can clearly distinguish the normal traffic from the attack flow, and the defense task can be accomplished on the premise of guaranteeing the available bandwidth of the normal data flow.
【学位授予单位】：河北大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP393.08

【相似文献】