深度数据包检测系统配置管理模块的设计与实现
|
摘要
随着网络的飞速发展,计算机网络的使用愈加普遍,其给人们的日常生活带来便利的同时,也带来了一些问题,如网络上传播的信息可能含有暴力,反动信息,或者某些带宽被占据等等。这给电信运营商,企事业单位都带来了或多或少的影响。因此DPI技术在网络业务的传输及发展过程中有了重要的应用。在基于ATCA和多核处理器技术实现的内容检测系统的基础上,本文对该系统设计并实现了配置管理功能,通过使用浏览器就可以对系统进行配置管理,为工作人员提供了方便。
论文首先针对随着网络出现的问题做了国内外现状研究,在DPI技术的应用场景和产业趋势上做了说明。同时,论文针对本文使用的相关技术做了详尽的介绍,包括DPI技术的原理、特性、功能,以及在Linux环境上搭建的Web开发平台,采用的ExtJS框架及MVC模式。
紧接着,论文描述了整个系统的工作原理,并基于此过程对各功能模块进行了划分和说明。随后,详细描述了数据包采集与解析,配置管理模块中的数据包信息列表显示,敏感信息配置,用户管理的详细设计和实现过程。
最后,论文对所实现的配置管理模块及数据包采集与解析进行了测试,并对测试结果进行分析,完成了该系统的功能需求。
With the rapid development of the network, the use of computer networks becomes more and more common. It brings convenience to people's daily lives, but at the same time, it also brings some problems, such as network information may contains violence, reactionary, or certain bandwidth is occupied, and so on. This makes telecom operators, enterprises and institutions a greater or lesser bad influence. So DPI technology becomes important in network transmission and development process. On the basis of the content detection system realized, this paper designs and implements the configuration management module, it uses the browser to configure and manage the system by using the browser, which takes convenience for staff.
Firstly, to solve this problem, this paper does the research for domestic and international status, and describes the DPI technology applications on the scene and industry trends described. At the same time, the paper introducts the related technology used detailly, including the principle, features,functions of DPI technology, as well as a Web development platform built on the Linux environment, using the ExtJS framework and MVC pattern.
Nextly, the paper describes the working principle of the whole system, and divides and describes the various functional modules based on this process. Subsequently, a detailed description of detailed design and implementation process for the configuration management module, the data packet information list display, sensitive information configuration, user management, network service identification, as well as packet capture and parsing.
Finally, to the implemented configuration management module and the packet capture, this paper establishes the testing environment, and then analyses the results, which completes the functional requirements of the system.
论文首先针对随着网络出现的问题做了国内外现状研究,在DPI技术的应用场景和产业趋势上做了说明。同时,论文针对本文使用的相关技术做了详尽的介绍,包括DPI技术的原理、特性、功能,以及在Linux环境上搭建的Web开发平台,采用的ExtJS框架及MVC模式。
紧接着,论文描述了整个系统的工作原理,并基于此过程对各功能模块进行了划分和说明。随后,详细描述了数据包采集与解析,配置管理模块中的数据包信息列表显示,敏感信息配置,用户管理的详细设计和实现过程。
最后,论文对所实现的配置管理模块及数据包采集与解析进行了测试,并对测试结果进行分析,完成了该系统的功能需求。
With the rapid development of the network, the use of computer networks becomes more and more common. It brings convenience to people's daily lives, but at the same time, it also brings some problems, such as network information may contains violence, reactionary, or certain bandwidth is occupied, and so on. This makes telecom operators, enterprises and institutions a greater or lesser bad influence. So DPI technology becomes important in network transmission and development process. On the basis of the content detection system realized, this paper designs and implements the configuration management module, it uses the browser to configure and manage the system by using the browser, which takes convenience for staff.
Firstly, to solve this problem, this paper does the research for domestic and international status, and describes the DPI technology applications on the scene and industry trends described. At the same time, the paper introducts the related technology used detailly, including the principle, features,functions of DPI technology, as well as a Web development platform built on the Linux environment, using the ExtJS framework and MVC pattern.
Nextly, the paper describes the working principle of the whole system, and divides and describes the various functional modules based on this process. Subsequently, a detailed description of detailed design and implementation process for the configuration management module, the data packet information list display, sensitive information configuration, user management, network service identification, as well as packet capture and parsing.
Finally, to the implemented configuration management module and the packet capture, this paper establishes the testing environment, and then analyses the results, which completes the functional requirements of the system.
引文
[1]中国互联网络发展状况统计报告中国互联网信息中心2012
[2]http://news.xinhuanet.com/tech/2012-07/19/c 123434921.htm
[3]边瑞锋.基于网络多核处理器的入侵防御系统的设计与实现.[学位论文]西安,西安电子科技大学,2009.2.
[4]王铎.IP业务识别与控制系统(DPI)的发展现状与思考
[5]陆飞跃网络流量控制系统的分析及实现北京邮电大学2010
[6]基于双层特征的P2P流量检测.计算机技术与发展,2009,19(7)
[7]基于DFI和DPI技术的异常流量监控.网络安全技术与应用,2009(1)
[8]华为技术网站：DPI深度包检测技术及其作用,http://www.huawei.com/cn/products/datacomm/catalog.do?id=2146,2007年4月
[9]比特网：透过DPI、DFI技术看智能流控系统的发展,2009年4月
[10]吴霖.基于多核网络处理器的P2P高速流量识别系统的设计与实现.学位论文苏州,苏州大学,2010.8.
[11]业务识别与管理系统和网络流量的管理
[12]网络流量分类与应用识别的研究.计算机应用研究,2008,25(5)
[13]陈琳,朱绍文,胡君红Access_list技术应用研究.航空计算技术.2002,32(2)：66-70.
[14]Luis Martin Garcia. Programming with Libpcap-Sniffing the Network From Our Own Application[J]. hakin9,2008,2:38-46.
[15]刘文涛.网络安全开发包详解[M].北京：电子工业出版社,2005.
[16]刘文涛.Linux网络入侵检测系统[M].北京：电子工业出版社,2004.
[17]闫丽丽,昌燕Libpcap结构研究[J].科技信息(科学教研),2007,(14)：81.
[18]平震宇Libpcap数据包捕获机制剖析与研究.信息网络安全,2008,(08)：37-39.
[19]徐千洋Linux C函数库参考手册[M].北京：中国青年出版社,2002
[20]Van Jacobson, Craig Leres, Steven McCanne. Manual Reference Pages-PCAP(3)[OL].[2004-1-15]. http://www.tcpdump.org/pcap3_man.html
[21]CaviumNetworksPacket_Flow_Chapter_r2_June_2009. America:Cavium Networks,June 2009.6.
[22]B. Braden,D. Clark,J. Crowcroft.RFC 2309-98.Recommendations on Queue Management and Congestion Avoidance in the Internet.Cisco Systems,April 1998.
[23]杨宗德,邓玉春linux高级程序设计.北京：人民邮电出版社,2009.
[24]谢希仁.计算机网络.北京：电子工业出版社,2010.
[25]W. Richard Stevens, Stephen A. Rago Advanced Programming in the UNIX(?) Environment , Second Edition.America:Addison Wesley Professional,2005.
[26]Oracle Corporation. MySQL Reference Manual. [2010-11-29]. http://dev.mysql.com/
[27]朱永庆.DPI技术应用场景探讨,2007.07.15.
[2]http://news.xinhuanet.com/tech/2012-07/19/c 123434921.htm
[3]边瑞锋.基于网络多核处理器的入侵防御系统的设计与实现.[学位论文]西安,西安电子科技大学,2009.2.
[4]王铎.IP业务识别与控制系统(DPI)的发展现状与思考
[5]陆飞跃网络流量控制系统的分析及实现北京邮电大学2010
[6]基于双层特征的P2P流量检测.计算机技术与发展,2009,19(7)
[7]基于DFI和DPI技术的异常流量监控.网络安全技术与应用,2009(1)
[8]华为技术网站：DPI深度包检测技术及其作用,http://www.huawei.com/cn/products/datacomm/catalog.do?id=2146,2007年4月
[9]比特网：透过DPI、DFI技术看智能流控系统的发展,2009年4月
[10]吴霖.基于多核网络处理器的P2P高速流量识别系统的设计与实现.学位论文苏州,苏州大学,2010.8.
[11]业务识别与管理系统和网络流量的管理
[12]网络流量分类与应用识别的研究.计算机应用研究,2008,25(5)
[13]陈琳,朱绍文,胡君红Access_list技术应用研究.航空计算技术.2002,32(2)：66-70.
[14]Luis Martin Garcia. Programming with Libpcap-Sniffing the Network From Our Own Application[J]. hakin9,2008,2:38-46.
[15]刘文涛.网络安全开发包详解[M].北京：电子工业出版社,2005.
[16]刘文涛.Linux网络入侵检测系统[M].北京：电子工业出版社,2004.
[17]闫丽丽,昌燕Libpcap结构研究[J].科技信息(科学教研),2007,(14)：81.
[18]平震宇Libpcap数据包捕获机制剖析与研究.信息网络安全,2008,(08)：37-39.
[19]徐千洋Linux C函数库参考手册[M].北京：中国青年出版社,2002
[20]Van Jacobson, Craig Leres, Steven McCanne. Manual Reference Pages-PCAP(3)[OL].[2004-1-15]. http://www.tcpdump.org/pcap3_man.html
[21]CaviumNetworksPacket_Flow_Chapter_r2_June_2009. America:Cavium Networks,June 2009.6.
[22]B. Braden,D. Clark,J. Crowcroft.RFC 2309-98.Recommendations on Queue Management and Congestion Avoidance in the Internet.Cisco Systems,April 1998.
[23]杨宗德,邓玉春linux高级程序设计.北京：人民邮电出版社,2009.
[24]谢希仁.计算机网络.北京：电子工业出版社,2010.
[25]W. Richard Stevens, Stephen A. Rago Advanced Programming in the UNIX(?) Environment , Second Edition.America:Addison Wesley Professional,2005.
[26]Oracle Corporation. MySQL Reference Manual. [2010-11-29]. http://dev.mysql.com/
[27]朱永庆.DPI技术应用场景探讨,2007.07.15.