情报传输网络中流量识别技术研究与应用
发布时间：2019-03-18 17:43
【摘要】：情报传输网络是传输情报信息的主要途径之一，随着大量先进信息技术的不断应用，海量信息的蜂拥而至，对情报传输能力提出了较高的要求。在这样的背景下分析与处理军事情报信息，，使其具有时效性是重点，故而军事情报工作必须具备安全、快速的情报传输能力。 随着新军事变革的推进，世界各国都在积极地完善情报传输网络。目前我军情报传输网络带宽有限，而P2P与流媒体等大流量业务挤占带宽资源，因此，急需对网络流量加以控制，保证情报信息等关键业务的实时性要求，提高情报传输网络的数据传输能力。 现代作战，战场情况瞬息万变，要求指挥也必须快速与及时，这对情报信息传递能力提出了更高的要求。要想赢得信息化战争，就必须掌握信息优势，而掌握信息优势的关键之一就是拥有快速的情报传输能力。伴随着新军事变革的推进，特别是随着联合作战、非战争军事行动和分布式网络化作战的理论发展与行为实践，新的军队任务模式不断对情报传输能力提出新的要求，因此以美国为首的世界各军事大国都在积极完善情报传输网络。 为提高情报传输网络带宽资源的利用率，结合情报传输网络建设的实际情况，本文提出了流量控制系统解决方案，并从总体设计、总体框架、体系结构、功能模块以及系统部署模式等方面对流量控制系统进行了设计。 针对随机端口、动态端口以及加密数据流等问题，在对比分析端口识别、深度包检测（DPI）以及深度/动态流检测（DFI）等技术的基础上，提出了一种DPDFI联合检测法，并以此为核心从设计目标、总体框架、工作流程以及功能模块等方面设计实现了流量识别方法；采用多核处理和并行计算的硬件平台，兼顾了执行效率。 本文采用流量识别率测试实验，对流量识别方法的有效性进行验证，结果显示该方法与深度包检测（DPI）相比，在保持较高效率的基础上流量识别率提高了6.63%；为了说明该方法的应用价值以及流量控制系统的作用，在实际网络中进行了测试，测试结果表明能够满足情报传输网络的实际需求。最后本文指出了该方法的不足之处以及下一步的研究方向。
[Abstract]:The information transmission network is one of the main ways to transmit intelligence information. With the continuous application of a large number of advanced information technology, the great demand for information transmission capability is brought forward. In such a background, it is important to analyze and process the military intelligence information, so that the military intelligence work must have the capability of safe and rapid information transmission. With the advancement of the new military reform, all the countries of the world are actively improving the information transmission network At present, the network bandwidth of the information transmission of our army is limited, and the large-flow traffic such as P2P and streaming media is crowded with the bandwidth resources. Therefore, it is in urgent need to control the network traffic and ensure the real-time requirements of key business such as intelligence information, so as to improve the data transmission of the information transmission network. Force. Modern operation, the situation of the battlefield is changing rapidly, and the command must also be fast and timely, which makes the information transfer capability higher In order to win the information war, it is necessary to master the information advantage, and one of the key to the information advantage is to have the fast information transmission With the advance of the new military reform, especially with the theory development and practice of the joint operation, the non-war military operation and the distributed network operation, the new army mission mode has constantly proposed new information transmission capability. As a result, all the military powers of the world, led by the United States, are actively improving the information transfer In order to improve the utilization of the network bandwidth resources of the information transmission and the actual situation of the construction of the information transmission network, this paper presents the solution of the flow control system, and from the overall design, the general framework and the flow control system in aspects of architecture, function module and system deployment mode, and the like A kind of DPDFI combined detection method is put forward on the basis of comparison analysis port identification, deep packet detection (DPI) and depth/ dynamic flow detection (DFI) and so on, based on the technologies such as random port, dynamic port and encrypted data stream. the core is designed to realize the flow identification method from the design goal, the overall framework, the working process and the functional module and the like, and adopts a multi-core processing and parallel computing hardware platform, In this paper, the effectiveness of the flow identification method is verified by the flow rate recognition test. The results show that the method is more efficient than the deep packet detection (DPI). The rate is increased by 6.63%; in order to illustrate the application value of the method and the function of the flow control system, the test is carried out in the actual network, and the test results show that the information can be satisfied The actual demand of the transmission network is pointed out in the last paper.
【学位授予单位】：吉林大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.06
本文编号：2443075
[Abstract]:The information transmission network is one of the main ways to transmit intelligence information. With the continuous application of a large number of advanced information technology, the great demand for information transmission capability is brought forward. In such a background, it is important to analyze and process the military intelligence information, so that the military intelligence work must have the capability of safe and rapid information transmission. With the advancement of the new military reform, all the countries of the world are actively improving the information transmission network At present, the network bandwidth of the information transmission of our army is limited, and the large-flow traffic such as P2P and streaming media is crowded with the bandwidth resources. Therefore, it is in urgent need to control the network traffic and ensure the real-time requirements of key business such as intelligence information, so as to improve the data transmission of the information transmission network. Force. Modern operation, the situation of the battlefield is changing rapidly, and the command must also be fast and timely, which makes the information transfer capability higher In order to win the information war, it is necessary to master the information advantage, and one of the key to the information advantage is to have the fast information transmission With the advance of the new military reform, especially with the theory development and practice of the joint operation, the non-war military operation and the distributed network operation, the new army mission mode has constantly proposed new information transmission capability. As a result, all the military powers of the world, led by the United States, are actively improving the information transfer In order to improve the utilization of the network bandwidth resources of the information transmission and the actual situation of the construction of the information transmission network, this paper presents the solution of the flow control system, and from the overall design, the general framework and the flow control system in aspects of architecture, function module and system deployment mode, and the like A kind of DPDFI combined detection method is put forward on the basis of comparison analysis port identification, deep packet detection (DPI) and depth/ dynamic flow detection (DFI) and so on, based on the technologies such as random port, dynamic port and encrypted data stream. the core is designed to realize the flow identification method from the design goal, the overall framework, the working process and the functional module and the like, and adopts a multi-core processing and parallel computing hardware platform, In this paper, the effectiveness of the flow identification method is verified by the flow rate recognition test. The results show that the method is more efficient than the deep packet detection (DPI). The rate is increased by 6.63%; in order to illustrate the application value of the method and the function of the flow control system, the test is carried out in the actual network, and the test results show that the information can be satisfied The actual demand of the transmission network is pointed out in the last paper.
【学位授予单位】：吉林大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.06
【参考文献】
相关期刊论文 前10条
1 杨超;贵颖祺;;网络流量分析及控制策略[J];电脑知识与技术;2011年12期
2 段生林;特征检测在入侵检测系统中的应用[J];华南金融电脑;2004年04期
3 吕效红;;基于Linux内核的BT流量控制的原理与实现[J];黄山学院学报;2010年03期
4 张玉冲;蔡皖东;丁要军;;一种适用于应用层协议的特征提取算法[J];计算机工程;2012年04期
5 陈伟;胡磊;杨龙;;基于载荷特征的加密流量快速识别方法[J];计算机工程;2012年12期
6 杨虎;张大方;谢鲲;雷渊明;何施茗;;Netfilter/Iptables框架下基于TCP滑动窗口的串行流量控制算法[J];计算机工程与科学;2009年10期
7 陈伟;兰巨龙;张建辉;;基于端点特征的P2P流媒体识别方法[J];计算机应用研究;2012年07期
8 曾武;张国兵;黄皓;;基于网络处理器的防火墙流量控制技术[J];计算机应用研究;2006年11期
9 林志兴;;校园网络流量控制分析与实施[J];三明学院学报;2009年04期
10 朱国胜;余少华;;高速低功耗深度报文检测方法[J];通信学报;2011年04期
本文编号：2443075
本文链接：https://www.wllwen.com/guanlilunwen/ydhl/2443075.html
