基于云计算架构的短时延网络攻击路径检测系统设计  

Design of short time⁃delay network attack path detection system based on cloud computing architecture

作　　者：袁刚[1,2] 温圣军 YUAN Gang;WEN Shengjun(Beijing University of Posts and Telecommunications,Beijing 100876,China;Information Center of the Sate Administration for Market Regulation,Beijing 100820,China;The PLA Information Engineering University,Zhengzhou 450002,China)

机构地区：[1]北京邮电大学,北京100876 [2]国家市场监督管理总局信息中心,北京100820 [3]解放军信息工程大学,河南郑州450002

出　　处：《现代电子技术》2020年第21期64-67,共4页Modern Electronics Technique

摘　　要：为了保证短时延网络的运行安全,降低网络攻击带来的威胁,从硬件和软件两个角度,设计基于云计算架构的短时延网络攻击路径检测系统。在硬件系统中安装用来保存检测数据以及检测结果的内嵌存储器、用来捕获网络数据包的数据采集卡以及执行检测功能的IDS检测器。通过捕获网络数据包、攻击源追踪和入侵路径检测三个模块的设计,实现系统的攻击路径检测功能。通过设计系统测试实验来验证设计的网络攻击路径检测系统的性能,经过与传统检测系统的对比发现,应用设计的网络攻击路径检测系统检测结果的准确率提升了18.75%,并且耗时更短。In order to ensure the safe operation of short time⁃delay network and reduce the threat of network attack,a short time⁃delay network attack path detection system based on cloud computing architecture is designed in terms of hardware and software.The embedded memory for storing test data and test results,the data acquisition card for capturing network packets,and the IDS detector for performing test function are installed in the hardware system.The attack path detection function of the system is realized by designing the three modules,named network packet capture module,attack source tracing module and intrusion path detecting module.The performance of the designed network attack path detection system is verified by designing a system test experiment.In comparison with the traditional detection system,it is found that the accuracy of the detection results obtained with the designed network attack path detection system is increased by 18.75%,and its detection duration is shorter.

关 键 词：短时延网络 网络攻击 云计算架构 攻击路径检测 攻击源追踪 系统设计 

分 类 号：TN915.08-34[电子电信—通信与信息系统] TP183[电子电信—信息与通信工程]