基于BGP協(xié)議的流量過(guò)濾系統(tǒng)的設(shè)計(jì)與實(shí)現(xiàn).pdf

1、東南大學(xué)碩士學(xué)位論文基于BGP協(xié)議的流量過(guò)濾系統(tǒng)的設(shè)計(jì)與實(shí)現(xiàn)姓名：梁清申請(qǐng)學(xué)位級(jí)別：碩士專(zhuān)業(yè)：計(jì)算機(jī)科學(xué)與技術(shù)；計(jì)算機(jī)系統(tǒng)結(jié)構(gòu)指導(dǎo)教師：丁偉20110604東南大學(xué)碩士學(xué)位論文AbstractTheDesignandImplementationofanetworktrat五cfilterationsystemBasedonBGPprotocolLiangQingoDINGWeiSoutheastUniversityWiththerapi

2、ddevelopmentofcomputernetworktechnologynetworkattackme觚smultifacettedandcomplicatedintelligenttrendNetworksecurityproblemincreasinglyNetworksecurityhasbecomeanincreasinglyimportantissueThezombienetworkdislributeddenialof

3、serviceattack(DDos)andothersecurityissueshaveoutbreaksThesemaliciousnetworkIFd在iCnotonlywastetheInternetb鋤d、啊dnl’alsomakeIntemet嘣losseshudgeInordertosolvetheseproblems，therea陀manytechnologies，suchasfirewalls，IDS，etcUsual

4、lytheffiteringofmaliciousnetworktlal五Cisrealizedthroughthefirewallbythefirewallislocatedintheboundariesofthenetworktheflowmustgothroughafuewallalloutthiswillrequireafirewall伽haveveryhi曲hardwareandsoftwareconditionsInfact

5、maliciousnetwork嘣icisnotalotandstableexistsinnetworkSOdon‘tneedallthemaliciousandnonmalwarenetworklla伍cthroughthefirewallisfilterthou#afiltersystemforthosewhoputbackagaintomonitormaliciousfranc，candirectlyinthenetworklay

6、erwillitsroutetoaspecifiedhostandthenthroughthehostfilterfiltrationsystem111ethesisstudiesanetworkWR仔iCfiltrationsystembasedonBGPprotoealsimilartoSinkholetechnologythisnetworktra伍cfiltrationsystemisrunningintheb0岫da巧ofIs

7、PexchangemutinginfomationbyBGPprotocolwithboundarymuterByexchangingroutinginfomationthissystemc鋤makeboundwyIDut盯changetheirroutingtable，whichwillleadtheattacktraf6ctothesystemAfterattacktra伍cisleadingtothissystemthissyst

8、emoanfilterthetrafficfurtherthennonmalwarenetwork鋤cwillforwardtheboundaryrouterwhichaccordingtothenormalflowofitsori垂naldirectionIransmittedtothecorrespondingboundaryrouterFirstlythethesisstudiesSinkholetechnologies，incl

9、udingSinkholekeytechnologiesandtypicalapplicationThenthethesissummarizethetheissuesofBGPprotocolreferencingtOthecorrespondingRFCBGPprotocolisreliablestable，flexibleandscalableThereforea10tofISPSusesBGPintheboundaryrouter

10、asanextolhalgatewayprotocolformutinginformationexchangeDuetotheneedforfurtherattacktrafficfilteringthethesisalsostudiedthefilteringcapabilitiesandfiltrationpropertiesofNetfilterunderLinuxThedesignandimplementationofanetw

11、ork旬隱伍cfilterationsystem(HydraSystem)based013BGPprotocolisthekeyproblemofthisthesisn圮designandimplementationofHydraSystemobeysthegeneralprocessofsoftwareengineeringFirstthesystemneedstorequirementsanalysisingtounderstand

12、thesystemfunctionalityThendetaileddesignisrequiredthemainfocusofthispaperdescribesthedesignofleadingalgorithmbecauseitisthecoreoftheHydrasystemAfterdesignenterthecodingstage，atthisstage，themostimportantpartishowtheBGProu