主动网络流水印技术研究进展

发布时间：2018-04-14 10:24

本文选题：网络安全 + 主动流量分析　；参考：《通信学报》2014年07期

【摘要】：在匿名网络环境下通信双方关系确认、僵尸网络控制者追踪、中间跳板主机发现等方面,以被动网络流量分析(passive traffic analysis)为核心的传统入侵检测与流关联技术存在空间开销大、实时性差、识别率低、灵活性欠佳、难以应对加密流量等明显缺点。而将主动网络流量分析与数字水印思想相融合的主动网络流水印(ANFW,active network flow watermark)技术能有效克服传统被动网络流量分析方法的不足,已引起了国内外学者的广泛关注。首先阐述了ANFW机制的通用模型,总结了ANFW技术的分类及所涉及的角色关系;其次,详细综述了近年来提出的多种典型的基于不同网络流特征的ANFW技术,并进行对比性总结;最后,概述了当前ANFW技术自身安全威胁及应对措施现状,展望了其未来的研究方向。
[Abstract]:In the anonymous network environment, the traditional intrusion detection and flow correlation technology based on passive network traffic analysis (passive traffic analysis), such as botnet controller tracking, intermediate springboard host discovery and so on, has a large space overhead.Poor real-time, low recognition rate, poor flexibility, difficult to deal with encrypted traffic and other obvious shortcomings.The active network income printing ANFWN active network flow watermarktechnique, which combines the active network traffic analysis with the digital watermarking idea, can effectively overcome the shortcomings of the traditional passive network traffic analysis methods, and has attracted wide attention from scholars at home and abroad.Firstly, the general model of ANFW mechanism is introduced, and the classification of ANFW technology and the roles involved are summarized. Secondly, several typical ANFW technologies based on different network flow characteristics are summarized in detail, and compared with each other.Finally, the current situation of ANFW security threats and countermeasures is summarized, and its future research direction is prospected.
【作者单位】：东南大学计算机科学与工程学院;西藏民族学院信息工程学院;东南大学计算机网络和信息集成教育部重点实验室;
【基金】：江苏省科技支撑计划(工业)基金资助项目(BE2011173) 江苏省未来网络前瞻性基金资助项目(BY2013095-5-03) 江苏省六大人才高峰基金资助项目(2011-DZ024) 国家重点基础研究发展计划(“973”计划)基金资助项目(2009CB320505) 国家自然科学基金资助项目(60973123)~~
【分类号】：TP393.08

【相似文献】