网络入侵后的波动控制系统设计与实现  

Design and implementation of fluctuation control system after network intrusion

作　　者：赵静[1] ZHAO Jing(Urumqi Vocational University,Urumqi 830002,China)

机构地区：[1]乌鲁木齐职业大学,新疆乌鲁木齐830002

出　　处：《现代电子技术》2016年第14期24-27,31,共5页Modern Electronics Technique

基　　金：国家自然科学基金:基于复杂网络的虚拟社区关系挖掘与网络舆情演出分析(71173199);新疆少数民族学生中高职衔接教育研究(11YJC880028)

摘　　要：网络入侵具有较强的破坏以及不可控性,受到入侵攻击后的网络流量存在冲突、约束数据带宽等随机因素,使得网络流量产生波动,稳定性降低。以往网络波动控制方法,在网络波动性高于设置的阈值后,控制方法不能对网络波动进行有效控制。因此,基于自抗扰控制器,设计并实现网络波动控制系统,该系统包括流量采集模块、流量汇总模块、流量异常检测和控制模块以及警示模块,并且具备网络探析部件、主机探析部件、策略管理中心、控制台四大功能。系统采用自抗扰处理器对入侵攻击产生的流量波动进行控制,确保网络流量的均衡性。实验结果表明,所提方法下的网络入侵行为显著降低,具有较低的网络入侵性能。Network intrusion has strong destruction and uncontrollability,so there are the network traffic conflict,databandwidth constraint and other random factors after intrusion attack,which make the network traffic appear fluctuation and lowstability. Since the previous network fluctuation control method can't control network fluctuation effectively when the networkfluctuation is higher than the set threshold,a network fluctuation control system was designed and implemented on the basis ofactive disturbance rejection controller(ADRC). The system is composed of traffic acquisition module,flow aggregation module,traffic anomaly detection & control module and warning module,and has the functions of network analysis,host analysis,strate?gy management and control. The immunity processor is used in the system to control the flow fluctuation caused by intrusion at?tack,and ensure the network traffic balance. The experimental results indicate that the proposed method makes network intru?sion behavior significantly reduced.

关 键 词：网络入侵 波动控制 网络流量失稳控制 系统设计 

分 类 号：TN926.34[电子电信—通信与信息系统] TP393[电子电信—信息与通信工程]