基于DPI的流量識(shí)別與控制系統(tǒng)的設(shè)計(jì)與實(shí)現(xiàn).pdf

1、論文題目：基于DPI的流量識(shí)別與控制系統(tǒng)的設(shè)計(jì)與實(shí)現(xiàn)專(zhuān)業(yè)：通信與信息系統(tǒng)碩士生：李潔（簽名）__________指導(dǎo)老師：李白萍（簽名）__________摘要隨著互聯(lián)網(wǎng)技術(shù)的極速發(fā)展，各類(lèi)新型的應(yīng)用軟件層出不窮，網(wǎng)絡(luò)已經(jīng)從過(guò)去傳統(tǒng)的Web，F(xiàn)TP，SMTP，Tel等，發(fā)展到如今的以P2P，VoIP以及流媒體等業(yè)務(wù)為主。新型應(yīng)用占據(jù)大量的網(wǎng)絡(luò)流量，使得帶寬資源日益緊張，網(wǎng)絡(luò)上的惡意攻擊行為也越來(lái)越多。此外，一些企業(yè)對(duì)限制員工在上班期間利

2、用公司網(wǎng)絡(luò)進(jìn)行私人的上網(wǎng)行為也有非常迫切的需求。面對(duì)這些困境和市場(chǎng)需求，實(shí)現(xiàn)對(duì)網(wǎng)絡(luò)流量的可視可控可管，保證通信系統(tǒng)的透明和安全，具有非常重要的應(yīng)用價(jià)值。針對(duì)上述問(wèn)題，本文首先研究并分析了流量識(shí)別和流量控制技術(shù)，在此基礎(chǔ)上設(shè)計(jì)并實(shí)現(xiàn)了一種簡(jiǎn)單有效的基于深度包檢測(cè)技術(shù)（DeepPacketInspection，DPI）的流量識(shí)別和控制系統(tǒng)。完成了系統(tǒng)的總體架構(gòu)設(shè)計(jì)，闡述了各模塊的功能及具體的實(shí)現(xiàn)方法，設(shè)計(jì)了利用精確字符串和正則表達(dá)式的特征庫(kù)

3、描述方式，選擇了優(yōu)化的匹配引擎，最后對(duì)系統(tǒng)進(jìn)行了功能測(cè)試，驗(yàn)證了該系統(tǒng)的性能。關(guān)鍵詞：流量識(shí)別；流量控制；深度包檢測(cè)技術(shù)；AC算法；DFA算法研究類(lèi)型：應(yīng)用研究型Subject:DesignImplementationonDPIBasedwkTrafficIdentificationControlSystemSpecialty:CommunicationInfmationSystemName:LiJie(Signature)Instru

4、ct:LiBaiping(Signature)ABSTRACTWiththefastdevelopmentofIntertechnologyvariousnewapplicationsemergeoneafteranotherwkhasbeenfromthepasttraditionalWebFTPSMTPTeletctoP2P.UntilnowsuchasP2PVoIPstreamingmediaaremainlyapplicatio

5、ns.Newapplicationstakealotofwktrafficmakingthebwidthresourceisbecomingmemelimitedalsomememaliciousattacksonthewkbehaviappear.Inadditionsomeenterpriseswanttolimitemployeesfprivateuseofcompanywkonlinebehaviduringthewkingho

6、urs.Indertosolvethesedifficultiesthemarketdemrealizethewktrafficvisualcontrolensuretransparencysecurityofcommunicationsystemhasveryimptantapplicationvalue.Accdingtotheaboveproblemthispaperstudiedanalyzedtheflowrecognitio

7、nflowcontroltechnologysoastodesignrealizesakindofsimpleeffectivetrafficidentificationcontrolsystembasedontheDeepPacketInspectiontechnology(DeepPacketInspectionDPI).Tocompletetheoverallarchitectureofthesystemdesignthispap

8、erexpoundsthefunctionofeachmoduleconcreteimplementationmethodofthedesignbyusingtheacteristicsoftheprecisestringsregularexpressionslibrarydeionwaychoosetheoptimizedmatchingenginefinallyafterthesystemfunctiontestverifiedth