网络端口扫描技术原理 本科论文.doc

网络端口扫描技术原理分析与实现 作 者：李利均 摘要 随着计算机在现代社会的广泛应用，计算机网络在人们工作和生活的各个领域占有越来越重要的地位。由于网络规模的迅速扩张和计算机系统的日益复杂，新的系统漏洞层出不穷。如何保证网络的安全运行已经成为一个亟待解决的问题。网络扫描技术是当前网络安全评估的重要组成部分，通过对网络的扫描，能够及时了解网络的运行状况及其存在的弱点，从而帮助网络管理员充分的了解网络的实际情况，并制定合适的安全策略，最终达到改善网络状况，增强网络安全系数的目的。同时，网络扫描技术也常为入侵者所利用，通过扫描远程主机或网络，能够探测攻击目标的软硬件配置信息，为制订攻击策略做准备。 本文详细研究了计算机端口扫描技术的优缺点，并采用多线程技术结合TCP全连接扫描实现了基于C语言和Windows Socket编程的网络端口扫描程序。程序模拟入侵者对目标主机的多线程入侵扫描，快速、及时、准确地检测出目标主机的端口状态，为网络系统管理员评测系统安全性提供数据支持。 关键词：多线程；TCP全连接；同步；Winsock；TCP/IP Abstract With the wide range of applications of the computer in modern society, the computer network plays a more and more important role in people’s working and living. Due to the rapid expansion of the network size and the increasing complexity of the computer systems, an endless stream of new vulnerabilities will be found. How to ensure the safe operation of the network has become an issue. Network scanning technology is an important component of the current network security assessment. By scanning the network to keep abreast of the operation of the network and its weaknesses, thereby helping network administrators to fully understand the actual situation of the network and to develop appropriate security policy, and ultimately achieve the purpose of improving the network conditions, and enhancing the network security coefficient. At the same time, network scanning technology is also often used by intruders. By scanning the remote host or network, intruders can detect the hardware and software configuration information of the target. Thereby formulate the strategies to prepare attack. In this paper, I give a detailed study of the advantages and disadvantages of computer port scanning technology, and use the multi-threading technology and TCP connect scanning technology to achieve a network port scanner which is based on the C programming language and Windows Socket. The procedure simulate the invaders on the target hosts invasion of multi-threaded scanning, rapidly, timely and accurately d