基于宣告式网络的网络溯源系统的设计与实现  

Design and Implementation of Network Provenance System Based on Declarative Networking

作　　者：高翔[1] 王晓[1] 王敏[2] 

机构地区：[1]西北工业大学计算机学院,西安710072 [2]空军工程大学电讯工程学院,西安710077

出　　处：《计算机科学》2014年第4期163-167,194,共6页Computer Science

基　　金：国家科技支撑计划(2012BAB15B01)资助

摘　　要：网络的举证分析、错误诊断在网络管理和安全方面正发挥着越来越重要的作用。这就要求网络管理系统具有网络溯源的功能。网络溯源可以用于跟踪信息在网络上流传的轨迹,确定信息数据来源。提出了一个网络溯源系统(NPS)框架的设计与实现,该框架可以支持在大规模的分布式环境中获得网络溯源,采用了新近提出的宣告式网络技术来有效地维护和查询分布式网络溯源。该框架采用基于引用的方式来传递溯源信息,采用有向无环图来表示溯源信息,在分布式网络中实现了高效的网络溯源。在ns-3构建的模拟网络中进行了仿真实验,实验结果表明该网络溯源系统框架可以有效地支持一个大规模分布式网络的溯源计算,与传统方法相比显著地减少了带宽的开销。Network forensic analysis and fault diagnosis are becoming increasingly important in network management and network security domain.This requires network management system has the ability to query network metadata.For instance,network provenance can be used in tracking the path of dataflow through the network to obtain the source of data.This paper presented the design and implementation of a network provenance system （NPS） framework.The framework is used to support the full range of functionality required for enabling forensics in distributed systems.We adopted the declarative networking technique in the networking domain to maintain and query distributed network provenance.The framework adopts a reference-based approach to transfer provenance information and a cyclic graph to represent the provenance information,implementing efficient network provenance in distributed network.Simulation experiments were conducted in simulated network.The experiment results indicate that our network provenance system can support provenance process in a large-scale distributed network and significantly reduce bandwidth cost compared to traditional approach.

关 键 词：网络溯源 宣告式网络技术 分布式查询处理 查询优化 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]