IDC域名可视化管理的应用研究
发布时间：2019-03-03 16:37
【摘要】：互联网充澈着大量由Content Provider，即CP提供的内容信息，而这些内容信息以网站的形式托管于Internet Data Center，即IDC机房，每个网站都由一个主域名，若干个子域名组成。大量犯罪违法的内容，利用管理漏洞存在这些域名中，对社会造成了严重的危害。 我们国家在09年互联网整风行动中，由中华人民共和国工业和信息化部，即工信部，提出了域名实名制管理办法，要求各运营商严格执行“先备案，后接入”，对接入域名严格执行“谁接入，谁负责”的管理制度。为符合工信部对域名管理的相关要求，上海移动于同期启动IDC域名可视化管理专项工作，研究建立IDC域名可视化管理系统。系统使用先进的域名自动识别、管理、分析和控制技术，大幅提高IDC域名管理水平，阻断非法站点的访问，从而避免监控疏漏导致的犯罪违法事件。 本文以设计建设上海移动IDC域名可视化管理系统为目标，对以下内容进行了研究： 论文首先对IDC域名可视化管理产生的背景和建设的意义进行了介绍，并结合IDC实际情况提出了功能性需求；然后对IDC域名可视化管理关键技术进行了介绍，分别为有源分光技术、域名提取技术、模式匹配算法以及域名拦截技术；对IDC域名可视化的系统设计进行了介绍，从域名收集及预处理、智能决策引擎、逻辑处理层，讲到展现层、外部接口；对IDC域名可视化管理系统部署的方式进行了实战研究，从最大化系统覆盖和最小化业务影响两个维度，选取最优点位完成了系统部署，并使用异常流量监控、异常流量清洗系统加强了域名可视化管理系统应对互联网安全威胁的能力；论文在最后介绍了IDC域名可视化管理系统的测试过程，以域名备案状态查询的准确率，以及根据域名状态执行规则的成功率两个方向入手，对系统功能进行严格测试，，通过测试结果对系统性能有了充分的了解。 通过以上的实际研究，结合工信部要求和IDC实际需求，完成了IDC域名可视化管理系统的设计和建设。系统已应用到日常实际生产和管理工作中去了，在上海移动IDC域名管理工作中发挥了积极的作用。
[Abstract]:The Internet is full of content information provided by Content Provider, or CP, which is hosted in Internet Data Center, or IDC room in the form of a website. Each website is composed of a primary domain name and a number of sub-domain names, each of which is composed of a primary domain name and a number of sub-domain names. A large number of criminal and illegal content, the use of management loopholes exist in these domain names, causing serious harm to the society. During the 2009 Internet rectification campaign in our country, the Ministry of Industry and Information Technology of the people's Republic of China, that is, the Ministry of Industry and Information Technology, put forward measures for the management of the real-name system of domain names, requiring all operators to strictly implement the "filing first, then access". Docking domain names strictly enforce the "who access, who is responsible" management system. In order to meet the requirements of the Ministry of Industry and Information Technology (MIIT) for domain name management, Shanghai Mobile started the special work of IDC domain name visualization management at the same time, and studied the establishment of IDC domain name visualization management system. The system uses advanced domain name automatic identification, management, analysis and control technology to greatly improve the level of IDC domain name management, block the access to illegal sites, and thus avoid the crime and illegal events caused by oversight and oversight. Aiming at the design and construction of Shanghai Mobile IDC Domain name Visualization Management system, this paper studies the following contents: firstly, this paper introduces the background and significance of IDC Domain name Visualization Management. Combined with the actual situation of IDC, the functional requirements are put forward. Then the key technologies of IDC domain name visualization management are introduced, which are active spectral technology, domain name extraction technology, pattern matching algorithm and domain name interception technology. This paper introduces the system design of IDC domain name visualization, including domain name collection and preprocessing, intelligent decision engine, logic processing layer, presentation layer and external interface. The way of deploying IDC domain name visualization management system is studied. From the two dimensions of maximizing system coverage and minimizing business impact, the optimal point is selected to complete the deployment of the system, and abnormal traffic is used to monitor and control the system. Abnormal flow cleaning system strengthens the ability of domain name visualization management system to deal with Internet security threats; In the end, the paper introduces the testing process of the IDC domain name visualization management system. Based on the accuracy of the domain name record status query and the success rate of the domain name status execution rules, the function of the system is tested strictly. The performance of the system is fully understood by the test results. Through the above research, combined with the requirements of the Ministry of Industry and Information Technology and the actual requirements of IDC, completed the design and construction of the IDC domain name visualization management system. The system has been applied to daily production and management, and has played an active role in the domain name management of Shanghai Mobile IDC.
【学位授予单位】：上海交通大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.07
本文编号：2433894
[Abstract]:The Internet is full of content information provided by Content Provider, or CP, which is hosted in Internet Data Center, or IDC room in the form of a website. Each website is composed of a primary domain name and a number of sub-domain names, each of which is composed of a primary domain name and a number of sub-domain names. A large number of criminal and illegal content, the use of management loopholes exist in these domain names, causing serious harm to the society. During the 2009 Internet rectification campaign in our country, the Ministry of Industry and Information Technology of the people's Republic of China, that is, the Ministry of Industry and Information Technology, put forward measures for the management of the real-name system of domain names, requiring all operators to strictly implement the "filing first, then access". Docking domain names strictly enforce the "who access, who is responsible" management system. In order to meet the requirements of the Ministry of Industry and Information Technology (MIIT) for domain name management, Shanghai Mobile started the special work of IDC domain name visualization management at the same time, and studied the establishment of IDC domain name visualization management system. The system uses advanced domain name automatic identification, management, analysis and control technology to greatly improve the level of IDC domain name management, block the access to illegal sites, and thus avoid the crime and illegal events caused by oversight and oversight. Aiming at the design and construction of Shanghai Mobile IDC Domain name Visualization Management system, this paper studies the following contents: firstly, this paper introduces the background and significance of IDC Domain name Visualization Management. Combined with the actual situation of IDC, the functional requirements are put forward. Then the key technologies of IDC domain name visualization management are introduced, which are active spectral technology, domain name extraction technology, pattern matching algorithm and domain name interception technology. This paper introduces the system design of IDC domain name visualization, including domain name collection and preprocessing, intelligent decision engine, logic processing layer, presentation layer and external interface. The way of deploying IDC domain name visualization management system is studied. From the two dimensions of maximizing system coverage and minimizing business impact, the optimal point is selected to complete the deployment of the system, and abnormal traffic is used to monitor and control the system. Abnormal flow cleaning system strengthens the ability of domain name visualization management system to deal with Internet security threats; In the end, the paper introduces the testing process of the IDC domain name visualization management system. Based on the accuracy of the domain name record status query and the success rate of the domain name status execution rules, the function of the system is tested strictly. The performance of the system is fully understood by the test results. Through the above research, combined with the requirements of the Ministry of Industry and Information Technology and the actual requirements of IDC, completed the design and construction of the IDC domain name visualization management system. The system has been applied to daily production and management, and has played an active role in the domain name management of Shanghai Mobile IDC.
【学位授予单位】：上海交通大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.07
【参考文献】
相关期刊论文 前1条
1 白斌;;网络安全中的TCP欺骗的研究[J];计算机与信息技术;2008年10期
本文编号：2433894
本文链接：https://www.wllwen.com/guanlilunwen/ydhl/2433894.html
