DDoS智能防御系统的日志分析及定时任务模块的设计与实现

发布时间：2018-03-26 11:21

本文选题：DDoS智能防御系统　切入点：Storm　出处：《南京大学》2014年硕士论文

【摘要】：某知名互联网公司运营了大量的产品服务器来为用户提供丰富的网络服务。在这种情况下,一旦遭遇巨大的数据流攻击,造成服务器的性能下降或宕机,从而无法继续提供稳定的互联网服务,这样的严重后果是公司所难以承受的。因此该公司需要开发一款DDoS智能防御系统来抵御应用层面的DDoS攻击,为产品服务器提供安全服务。在DDoS智能防御系统中,我们通过分析服务器访问日志和监控服务器状态信息,来侦测攻击者在网络中发起的DDoS攻击,然后通过封禁攻击者IP等手段来完成防御任务；根据功能点的不同,我们将系统划分为日志分析模块、监控模块、定时任务模块和Web模块四个互相合作的部分。系统采用的松耦合设计和分布式的Storm框架,都使得系统具有良好的可扩展性,即使在以后需要接入新的产品或者是为更多的服务器提供安全服务,都可以很方便的实现。DDoS智能防御系统采用Java语言实现,整体使用模块化的设计概念,利用Spring框架对项目中的组件进行管理,并负责整合为系统提供视图层服务的FreeMarker和提供数据持久层服务的iBATIS;同时,系统在日志分析模块中采用了Storm框架来满足对大量访问日志进行计算分析的需求,实时地提供有攻击嫌疑的数据；除此以外,为了方便进行一些定时的作业调度任务,系统在定时任务模块中还使用了Quartz框架来满足这项需求。本文主要从系统背景,需求分析和架构设计等方面来叙述整个项目,并且重点描述了系统中的日志分析模块和定时任务模块的设计与实现。
[Abstract]:A well-known Internet company operates a large number of product servers to provide users with a rich network service. In this case, once a huge data flow attack is encountered, the server performance can be degraded or downtime. The company cannot afford to continue to provide stable Internet services, so the company needs to develop a DDoS intelligent defense system to withstand application-level DDoS attacks. In the DDoS Intelligent Defense system, we detect DDoS attacks by analyzing server access logs and monitoring server status information. Then by blocking the attacker IP and other means to complete the defense task; according to the different function points, we divide the system into log analysis module, monitoring module, The loose coupling design of the system and the distributed Storm framework make the system have good expansibility. Even if it is necessary to access new products or provide security services for more servers in the future, the intelligent defense system of .DDoS can be easily implemented with Java language, and the modular design concept is used as a whole. Manage the components in the project using the Spring framework, and be responsible for integrating the FreeMarker, which provides the view layer service for the system, and the iBATIS, which provides the data persistence layer service, at the same time, In the log analysis module, the system adopts Storm framework to meet the needs of computing and analyzing a large number of access logs, and provides data suspected of attack in real time. In addition, in order to facilitate some scheduled job scheduling tasks, The system also uses Quartz framework to meet this requirement in the timing task module. This paper mainly describes the whole project from the aspects of system background, requirement analysis and architecture design, etc. The design and implementation of log analysis module and timing task module are described in detail.
【学位授予单位】：南京大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.08

【相似文献】