基于多核网络扫描技术探究.docVIP

基于多核网络扫描技术探究【 摘 要 】 主机扫描在网络安全中具有重要意义。通过对网络的扫描，网络管理员可以了解网络的安全配置和运行的服务，发现并处理安全漏洞，评估网络风险等级。由于网络中的主机数量、安全漏洞及攻击方法大幅的增加，要求网络管理员能快速地掌握网络与主机的情况，迅速做出反应。由于传统扫描软件受限于当时的硬件条件，其自身设计存在一定的局限性，无法满足现代高速网络主机扫描的需求，因此我们改进了网络扫描软件NMAP，提出了基于多核的NMAP并行扫描方案。此方案引进多核CPU——Tile64处理器，利用其强大的并行处理能力及多网口的优势，提高网络扫描的速度，强化网络扫描的功能。方案中并行执行是核心，负载平衡是并行提速的关键。在提高扫描速度的同时，增强扫描策略配置的灵活性，优化扫描的方式。 【 关键词 】 网络扫描；NMAP；多核；并行扫描；负载平衡 Research of Network Scanning Technology Based on Multi-core Kuang Ye 1 Lv Yao 2 (1.Capital University of Economics and Business Beijing 100070； 2.China Center for Information Industry Development Beijing 100048） 【 Abstract 】 Host scanning is important in the network security. Through the network scanning, network administrators can understand the network security configuration and operation of services, to identify and deal with security vulnerabilities, assessment of network risk level. Increasing the number of hosts on the network, security vulnerabilities and attack methods, it requires the network administrator can quickly grasp the situation of the network and host to respond quickly. There are some limitations of traditional scanning software is limited by the hardware conditions at the time of its design, can not meet the needs of modern high-speed network host scan, so we improve the network scanning software NMAP, put forward based on multi-core NMAP parallel scan program. This program is the introduction of multi-core CPU - Tile64 processor, using its powerful parallel processing capabilities and the advantages of multi-network port, improve the network scanning speed, strengthen the function of network scanning. In the scheme, parallel is the core, load balance is the key of parallel speed.In improving the scanning speed at the same time, enhance the flexibility of scanning strategy configuration, optimization of the scanning mode. 【 Keywords 】 network scanning；NMAP；multi-core；parallel scan；load balancing 1 引言 本文在深入分析网络扫描软件NMAP源码了解其扫描原理和运行流程的基础上，结合Tile64多核开发板强大的并行