一种基于假设检验的端口扫描引擎调优方法  

Optimized Port Scanning Method based on Hypothesis Testing

作　　者：孙耀辉 贺劼 齐权 SUN Yao-hui;HE Jie;QI Quan(Beijing Knownfuture Information Technology Co., Ltd, Beijing 100102, China)

机构地区：[1]北京知道未来信息技术有限公司,北京100102

出　　处：《通信技术》2018年第5期1161-1164,共4页Communications Technology

摘　　要：目前,由于稳定的TCP连接方法无法支持半连接扫描技术下的端口扫描,导致其扫描结果被网络波动所制约。因此,扫描结果的不稳定等问题成为制约互联网态势感知系统产出数据可靠性的最大因素。针对上述问题,提出了一种基于半连接的端口扫描优化方法,可以在快速的扫描速度下使得端口扫描引擎获得更加稳定、可靠的端口扫描结果。实验结果表明,该方法可以有效较少人工对比测试过程的介入,从而提高引擎调优的效率。At present, for that stable TCP connection method cannot support the port scanning under the semi-link scanning technology, the scanning result is restricted by the network fluctuation. Therefore, the instability of scan results becomes the major factor restricting the output-data reliability of the Internet situational awareness system. Aiming at the above problems, a semi-connected port scanning optimization method is proposed, which could make the port scanning engine acquire more stable and reliable port scanning results at a fast scanning speed. The experimental results indicate that this method can effectively reduce the intervention of the manual comparison test process, thus improving the efficiency of engine tuning.

关 键 词：半连接扫描 端口扫描调优 态势感知 假设检验 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]