一种新的大规模网络主动预警方法

网络的全球化发展决定网络安全向整体性和动态性发展,互联网的分散管理机制使得监控管理域外的网络安全状态变得非常困难.本文基于网络透视技术,提出一种新的大规模网络主动预警方法,可以对无控制权的网络进行实时监控和主动预警.当网络发生异常行为时,能够准确检测异常来源,缩小异常定位范围,对于大规模网络异常行为的检测和预防具有重要现实意义.以中国教育网拓扑结构为背景的仿真实验表明,该方法有效,对网络安全具有重要的研究意义和实用价值.

A New Approach for Large-scale Network Active Forewarning

The network global development tendency decides that the network security evolution runs to all-side and dynamic, and it is difficult to monitor networks out of control because of Internet decentralized control mechanism. In this paper, a new approach for large-scale network active forewarning is proposed based on network tomography, it can do the real-time monitor and make active forewarning for networks out of control. The sources of the abnormal traffic can be detected and located in the beginning of their spreading. Experimental results based on CERNET (China education and research network) topology indicate that the new approach is effective and has a further development potential for large-scale network active forewarning. It has important influence and practical value on the research of network security.