Dissertation > Excellent graduate degree dissertation topics show

Converged network boundary denial of service attack detection system developed

Author: QiuJunSha
Tutor: HuGuangZuo
School: University of Electronic Science and Technology
Course: Communication and Information System
Keywords: Denial of service attacks Telecommunications network Softswitch Network Convergence Parallel computing MPI
CLC: TP393.09
Type: Master's thesis
Year: 2011
Downloads: 21
Quote: 0
Read: Download Dissertation

Abstract

Be separated from each other in the past as to accelerate the process of our triple play, voice, data and cable TV networks will be gradual integration has evolved to become a multi-business integration, open next-generation communications networks based on packet switching. Accompanied with the rapid development of the network, network security environment has become increasingly complex, new security issues abound. Especially under the conditions of the network convergence, the safer traditional telecommunication network may also be subject to the security threats from the Internet. Denial-of-service attacks are the most common Internet attacks and the most difficult defense, and has been devastating form of attack. When the telecommunications network and the Internet through the softswitch platform merging, malicious Internet users can easily through converged network boundaries to telecommunications users to launch denial of service attacks, the attacker can not normally call. Fusion boundary for network denial of service attacks, and the actual needs of the expected analysis to detect attacks, designed to achieve a framework of an attack detection system, and on top of the framework of the detection system, the design and the attack of a detection algorithm The parallel detection module. Mainly to the completion of the work are: (1) the key factors in the research system and induction system framework design principles based on the framework of the detection system designed to deploy softswitch platform; design modular design principle to determine the functional requirements of the various parts of the system and the external interface to form a relatively independent of the three modules; proposed parallel processing of multi-threaded and multi-process detection; follow the above design ideas, a converged network boundaries denial of service attacks detection system framework. (2) presents a step-by-step detection strategies, the attack detecting process of division, the separation of the coarse, granular detected, to meet the requirements of real-time detection at the same time, to ensure the integrity of the detection accuracy and the detection result. Detection module design through the interface and implementation phase separation, so that the system is very easy to add new detection algorithm extended. Based on the analysis of the attack characteristics, on the basis of the detection system framework, attack detection algorithm based on call statistics, and is divided into the crude detection and precision detection of two steps, one for ordinary users attack detection module. Four-step method, the use of the parallel algorithm design from the two aspects of the computing and data detection tasks detailed decomposition, and propose a task dynamically balanced allocation mechanism; MPI library for inter-process communication, and (3). Control. Through the processes of communication space is divided, so that the process in accordance with the respective groups to communication, to avoid mutual interference. (4) the use of the attack simulation program, to build a simulation experiment environment, attack detection system simulation experiment, the simulation results verify the validity of the framework and the algorithm of the detection system, and the use of parallel computing performance boost.

Related Dissertations

CLC: > Industrial Technology > Automation technology,computer technology > Computing technology,computer technology > Computer applications > Computer network > General issues > The application of computer network
© 2012 www.DissertationTopic.Net Mobile