网络空间资源探测系统的设计与实现

发布时间：2018-08-06 12:10

【摘要】：随着计算机网络不断发展,尤其是进入21世纪之后,互联网时代的到来,各种产业不断向互联网转型。互联网已经成为了人们生活的一部分,网络给人们提供了方便,然而,网络安全问题却引发了人们的担忧,用户信息泄露,计算机遭到攻击数据被盗,对个人乃至国家都会造成巨大的损失,网络安全已经成为了一个不可忽视的问题,因此,维护互联网安全无论是对个人还是国家都具有重要的意义。为应对这一问题,网络探测技术应运而生,通过对网络中的资源进行探测,可以获取到网络空间中的资源信息,这些信息包含网络空间中的在线主机,开放的端口,运行在端口上的服务以及操作系统的类型和版本等。这些信息的获取有助于我们了解网络空间中的资源分布情况,掌握网络空间中的网络状况,对维护网络空间安全具有重大的意义。本文在网络探测技术的基础上,设计并实现了网络空间资源探测系统。首先,论文介绍了该课题的研究背景及意义,并对国内外现状做了分析,给出了论文的研究内容。其次,对相关网络探测的技术做了深入的研究,分别研究了无状态探测技术和传统网络探测技术,进而研究了数据包捕获技术。之后,对网络空间资源探测系统进行了需求分析和总体设计,给出了系统的总体框架图,在此基础上设计出了系统的框架处理流程图,并针对该系统的框架处理流程,对系统的模块进行了划分。然后,对系统进行了详细设计和实现,在探测模块的实现过程中给出了一种无状态探测异步收发框架,在该框架的基础上完成对主机发现和端口探测的实现,同时针对于服务和版本探测、操作系统探测和拓扑探测做了改进。最后,对该系统进行了测试和效果展示,验证网络空间资源探测系统符合设计原则和要求。
[Abstract]:With the continuous development of computer network, especially in the 21st century, the arrival of the Internet era, various industries continue to transform to the Internet. The Internet has become a part of people's lives, and the network has provided convenience to people. However, network security problems have aroused people's concern, user information has been leaked, computers have been attacked by data stolen, Network security has become a problem that can not be ignored. Therefore, it is of great significance to maintain Internet security for both individuals and countries. In order to deal with this problem, the network detection technology emerges as the times require. By detecting the resources in the network, we can obtain the information of the resources in the cyberspace, which includes the online host and the open port in the cyberspace. The service running on the port and the type and version of the operating system. The acquisition of this information is helpful for us to understand the distribution of resources in cyberspace, to master the situation of cyberspace, and to maintain the security of cyberspace. Based on the network detection technology, this paper designs and implements a network space resource detection system. First, the paper introduces the research background and significance of the subject, and analyzes the current situation at home and abroad, and gives the research content of the paper. Secondly, the related network detection technology is studied deeply, the stateless detection technology and the traditional network detection technology are studied respectively, and the packet capture technology is studied. Then, the requirement analysis and overall design of the network space resource detection system are carried out, and the overall frame diagram of the system is given. On this basis, the frame processing flow chart of the system is designed, and the frame processing flow chart of the system is designed. The module of the system is divided. Then, the system is designed and implemented in detail, and a stateless detection asynchronous transceiver framework is presented in the process of implementation of the detection module. Based on the framework, the realization of host discovery and port detection is completed. At the same time, for service and version detection, operating system detection and topology detection are improved.
【学位授予单位】：北京邮电大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP393.08

【相似文献】