基于网络拓扑的攻击响应系统-计算机应用技术专业论文.docxVIP

基于网络拓扑的攻击响应系统 基于网络拓扑的攻击响应系统 I I 摘 要 如今，在复杂的网络环境下，威胁网络安全的各种攻击越来越多。为 了帮助用户了解网络结构，方便地管理网络设备，同时对来自网络的攻击 能够采取及时、有效的响应措施，本文提出了一个基于网络拓扑的攻击响 应系统。 本系统通过发现网络拓扑结构，构成准确、有效的网络拓扑，帮助用 户了解网络设备部署情况，分析网络故障，加强对网络的控制管理。同时， 在入侵检测系统的支持下，本系统接收攻击报警信息，由攻击源回溯系统 重构出攻击路径，系统分析网络拓扑图采取快速、有效的响应措施。 本文首先讨论了当前在研究 IP 网络拓扑发现时遇到的困难，以及要得 到准确拓扑图所需要考虑的问题。然后，论文在分析了以前的拓扑发现搜 索算法的基础上，解决了网络拓扑发现的速度、细致度和正确度等问题， 提出并实现了一种有效的针对管理域内网络自动拓扑发现方法。最后,基于 这种拓扑发现方法，本文阐述了如何对网络拓扑图进行分析以采取相应的 响应措施。 本文最终成果为：设计并实现了一个基于网络拓扑的攻击响应系统。 该系统在收集网络拓扑信息以及显示网络拓扑图方面有了较大改进；系统 在得到拓扑图的前提下进行响应措施的实现，使得响应速度和目标的准确 性等方面得到了较大改善。 本文在校园局域网内进行了测试，使得本系统可以完成对指定网络的 快速、准确的拓扑发现；同时对来自远端的攻击进行及时响应。 关键词：网络拓扑，响应，攻击，网络安全，攻击源回溯，攻击路径 II II Abstract Nowadays, there are more and more dangerous attack behaviors in our complicated Internet. To help system administrators to know network structure and respond to attack behaviors quickly, a Response System for Attack Behaviors based on Network Topology is put forward. By finding network topology, this system can help users manage network more convenient. Moreover, with existing network resource assisting, this system can report attack behaviors and alarm users quickly. Then, based on the system of Attack Source Trace Back, some fast and effective responses can be taken during the course of intrusion. Firstly, the difficulties of current IP network topology research is discussed in this thesis, and problems for getting the accurate topology is be taken into account too. Secondly, after the existing methods of finding network topology being analyzed, a new method for finding network topology in certain management area is put forward and implemented. Finally, based on this new method, we can use the network topology to take corresponding response actions according to the attack behaviors. The achievement of this thesis is that a Response System for Attack Behaviors based on Network Topology is designed and implemented. In this system, There are some improvements in gathering network topology information and displaying networ