基于WDK网络数据流分析阻断系统的设计与实现

发布时间：2018-04-18 19:28

本文选题：信息网络安全 + 网络安全　；参考：《天津大学》2014年硕士论文

【摘要】：随着我国信息化的高速发展，互联网的日益普及，网民的急剧增多，网络安全事件时有发生，从2013年美国棱镜门主角斯诺登所爆料的美国“神童”黑客兵团通过网络入侵攻击等行为长期渗透达15年之久，到2014年1月的境外敌对势力造成的中国网络瘫痪事件诸多如此等等，都充分体现了信息化网络安全建设的重要性和必要性。在这样的大形势下，及多元化网络结构的载体形式如：视频、音频、网页、论坛、符号、新型网络社交平台的诞生等等，都需要大数据的挖掘分析整理工作。本文的研究重点是识别黑客攻击、境外势力渗透，保护数据不被非法采集，检测有效的链接状态防止黑客跨站攻击、木马脚本攻击等已知的不法行为。在庞大的网络信息中甄别攻击信息，阻断攻击，更好的保护网络信息安全。本文通过分析信息网络安全的特点、黑客攻击行为的途径方法等，借鉴国内外先进的经验，并对其理论进行分析与总结，从信息网络安全与网络监管部门角度出发，设计研发了一套基于WDK网络数据流分析阻断系统。该系统在使用传统的数据包分析基础上，设计了高速流数据处理核心与采用NoSQL相结合的设计方式，大大地提高了响应与识别处理周期。流分析采用Cache耦合原理，它的处理速度是传统数据仓库分析处理的数倍。通过分析网络监管部门的业务流程与处置方法，对探测与阻断的流数据进行分类型深度处置，，最后针对特定的网络环境下对系统进行了有效性测试并给出了较为详细的分析。
[Abstract]:With the rapid development of information technology in China, the increasing popularity of the Internet, the sharp increase of Internet users, network security incidents occur from time to time.Since 2013, the US Prism Gate protagonist Snowden revealed that the US "child prodigy" hacker corps through network intrusion attacks and other acts of long-term penetration for 15 years.Up to January 2014, China's network paralysis caused by hostile forces outside the country, and so on, has fully reflected the importance and necessity of the construction of information network security.In such a situation, and the carrier forms of diversified network structure such as: video, audio, web pages, forums, symbols, the birth of a new network social platform and so on, need big data's mining, analysis and sorting work.The research focus of this paper is to identify hacker attacks, infiltration of foreign forces, protection of data from illegal collection, detection of effective link status to prevent hackers from cross-site attacks, Trojan script attacks and other known illegal behavior.In the huge network information discriminates the attack information, blocks the attack, protects the network information security better.Based on the analysis of the characteristics of information network security, the ways and means of hacking, and the advanced experience at home and abroad, this paper analyzes and summarizes its theory, and sets out from the angle of information network security and network supervision department.A data stream analysis and blocking system based on WDK is designed and developed.On the basis of the traditional data packet analysis, the system designs the design method of combining the high speed stream data processing core with NoSQL, which greatly improves the response and identification processing cycle.The Cache coupling principle is used in the flow analysis, and its processing speed is several times faster than that of the traditional data warehouse.By analyzing the business process and disposal method of the network supervision department, the stream data detected and blocked are disposed in depth by type. Finally, the validity of the system is tested and analyzed in detail in the specific network environment.
【学位授予单位】：天津大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.08

【相似文献】