基于Hough变换的NAT规模被动估计新方法.pdfVIP

第55卷 第2期 电讯技术 Vol.55,No.2 2015年2月 Telecommunication Engineering February,2015 doi:10.3969/ j.issn.1001-893x.2015.02.011 引用格式:管涛,王科人,徐正国.基于Hough变换的NAT规模被动估计新方法[J].电讯技术,2015,55(2):175-181. [GUAN Tao,WANG Keren,XU Zhengguo.A New Passive NATted Hosts Counting Method Based on HoughTransform[J].Telecommunication Engineering,2015,55(2):175-181.] 基于 Hough变换的NAT规模被动估计新方法* ** 管摇 涛 ,王科人,徐正国 (盲信号处理重点实验室,成都610041) 摘摇 要:针对网络安全领域中网络地址转换器(NAT)规模被动估计这一问题,提出了一种新的NAT 规模被动估计方法。 在被动接收条件下,通过利用TCP数据包时间戳值与接收时间之间表现出的 线性关系,将NAT规模估计转换为坐标图上的直线数目检测问题。 然后基于Hough 变换递归放大 坐标图像来检测直线数目,从而估计出NAT规模大小。 与已有算法相比,该方法不仅可以解决初始 类别的选择问题,还能提高时间戳序列发生交叉或距离较近时的判断精度。 实验测试结果表明,该 方法可以准确地检测出线性关系的数目,进而估计出NAT规模大小,并且性能优于已有算法。 关键词:网络安全;NAT规模估计;TCP 时间戳;时间序列分析;线性关系估计;Hough 变换 中图分类号:TP393.08摇 摇 文献标志码:A摇 摇 文章编号:1001-893X(2015)02-0175-07 A New Passive NATted Hosts Counting Method Based on Hough Transform GUANTao,WANG Keren,XU Zhengguo (Key Laboratory of Science and Technology on Blind Signal Processing,Chengdu610041,China) Abstract:To solve the problem of NATted(Network Address Translator,NAT) hosts counting in network security,a new method based on Hough transform is proposed.By exploiting the linear relation between TCP timestampandreceivedtimeinthepackets,theproblemistransformedtocountinglinesinthecoordi鄄 nate graph.Hough transform is introduced to detect lines in the graph.To get more precise result,zooming in the graph iteratively is used in the algorithm.Compared with existing algorithms,the proposed method can solve the problem of choosing initial clusters,and improve the detection accuracy with intersected or short dis