高速网络流量内容还原系统的设计与实现

发布时间：2018-03-26 14:41

本文选题：P2P　切入点：HTTP　出处：《兰州大学》2014年硕士论文

【摘要】：网络应用在互联网技术及其应用的迅猛发展的背景下,已渗透到商业活动、国民生活以及工业生产等各个领域。网络技术进步与网络应用普及在最大程度方便人们的社会生活的同时又带来了诸多不安全因素与挑战。例如：网络信息异常繁杂,存在大量色情、暴力、反动、犯罪、欺诈等不安全信息,这些信息都会严重影响公众利益与社会稳定。现如今互联网早已迈入高速信息网络时代,传统的网络安全技术也过渡到了严重的性能瓶颈期。因此,高速网络环境下流量内容还原方法的研究具有非常重要的意义。本文在分析国内外研究现状,以及P2P、HTTP流量内容还原在高速网络环境下所面临技术难点的基础上,实现了数据采集系统,对采集到的数据进行统计分析,得到了一些对还原系统设计与实现具有参考价值的初步结论。接着,本文对IP分片技术、TCP流重组技术进行了深入的研究,并结合HTTP协议的特点,改进了TCP流重组思路,减少了对非HTTP流量的还原所造成的不必要的浪费,接着本文提出了一种对P2P传播视频进行监控审计的方法,该方法可实时检测到用户使用快播或BT来观看的影片信息,并可主动采样还原出视频内容,来对视频进行审计。接着本文详细的描述了高速网络流量内容还原系统的设计与实现,其中分HTTP流量内容实时还原系统和P2P行为识别及内容还原系统两部分内容。最后,本文在西安交通大学智能网络与网络安全教育部重点实验室搭建了测试平台,提出了P2P、HTTP流量内容还原系统的测试方法,对系统进行了功能测试和性能测试。测试结果表明系统能够对1Gbps带宽高速网络流量进行P2P行为捕获及主动还原、HTTP流量内容还原,系统性能达到预期目标。
[Abstract]:Under the background of the rapid development of Internet technology and its application, network application has penetrated into commercial activities. The progress of network technology and the popularization of network application bring many unsafe factors and challenges to people's social life at the same time. For example, the network information is very complicated. There are a lot of pornographic, violent, reactionary, criminal, fraudulent and other unsafe information that will seriously affect public interest and social stability. Nowadays, the Internet has entered the era of high-speed information network. The traditional network security technology has also made the transition to the serious performance bottleneck period. Therefore, it is of great significance to study the method of traffic content restoration in high-speed network environment. In this paper, based on the analysis of domestic and international research situation, and the technical difficulties of P2PU HTTP traffic content restoration in high-speed network environment, a data acquisition system is implemented, and the collected data are statistically analyzed. Some preliminary conclusions about the design and implementation of the reduction system are obtained. Then, this paper makes a deep research on the IP fragmentation technology and the characteristics of the HTTP protocol, and improves the idea of TCP stream recombination. It reduces the unnecessary waste caused by the restoration of non-#en0# traffic, and then this paper proposes a method of monitoring and auditing P2P spread video. This method can detect the information of videos watched by users using flash or BT in real time. And can take the initiative to sample and restore video content to audit the video. Then this paper describes the design and implementation of high-speed network traffic content restore system in detail. There are two parts: HTTP traffic content real-time restore system, P2P behavior identification system and content restore system. Finally, this paper builds a test platform in the key laboratory of the Ministry of Intelligent Network and Network Security of Xi'an Jiaotong University, and puts forward the testing method of P2PU HTTP traffic content restore system. The test results show that the system can capture the P2P behavior of 1Gbps bandwidth high-speed network traffic and actively restore the content of 1Gbps traffic.
【学位授予单位】：兰州大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.06

【参考文献】