基于KAD网络内容监督的关键技术研究

为了解决由于KAD消息的隐匿性造成对文件共享系统中内容难以监督的问题,一种通过对网络中指定节点的交互消息进行截获,并快速提取出对应消息内容的监督方法被提出.首先,对确定的目标节点使用ID名称映射方法,从消息中提取出其中的关键字HashID值.其次,使用轻量级的ID值逆向转换算法得到对应的语义内容,利用转换后的内容可进一步对该节点的威胁程度进行判定.最后,在eMule系统搭建的KAD网络中部署了实验,将0X10区域内10个节点作为监督对象,使用上述监督方法对发往目标节点的查询与发布请求消息进行拦截,并成功地得到对应的语义内容.实验结果表明了对网络监督的必要性以及该方法的可行性.

Key Technology Research for Content Supervision Based on KAD Network

To solve the issue that it is difficult to monitor the content on the KAD network because of occult of KAD message, a novel monitoring approach is proposed to obtain the content by intercepting the interactive message for a specified node on the network. First of all, the HashID for a keyword in the message of a supervised node can be extracted by using ID mapping method. Secondly, a lightweight method of reverse conversion algorithm is adopted to obtain the corresponding value for a specified HashID, which can further judge the threat level for the node. Finally, the experiment is deployed on the KAD network constructed by eMule system. When ten nodes in 0X10 zone are selected as targets, the above approach is adopted to intercept the quest and publish massages that send to supervised nodes, and the semantic content for messages is obtained successfully. The result of the experiment demonstrates the necessity for network supervision, as well as the feasibility of the approach.