【摘要】：情報傳輸網絡是傳輸情報信息的主要途徑之一，隨著大量先進信息技術的不斷應用，海量信息的蜂擁而至，對情報傳輸能力提出了較高的要求。在這樣的背景下分析與處理軍事情報信息，，使其具有時效性是重點，故而軍事情報工作必須具備安全、快速的情報傳輸能力。 隨著新軍事變革的推進，世界各國都在積極地完善情報傳輸網絡。目前我軍情報傳輸網絡帶寬有限，而P2P與流媒體等大流量業(yè)務擠占帶寬資源，因此，急需對網絡流量加以控制，保證情報信息等關鍵業(yè)務的實時性要求，提高情報傳輸網絡的數據傳輸能力。 現代作戰(zhàn)，戰(zhàn)場情況瞬息萬變，要求指揮也必須快速與及時，這對情報信息傳遞能力提出了更高的要求。要想贏得信息化戰(zhàn)爭，就必須掌握信息優(yōu)勢，而掌握信息優(yōu)勢的關鍵之一就是擁有快速的情報傳輸能力。伴隨著新軍事變革的推進，特別是隨著聯合作戰(zhàn)、非戰(zhàn)爭軍事行動和分布式網絡化作戰(zhàn)的理論發(fā)展與行為實踐，新的軍隊任務模式不斷對情報傳輸能力提出新的要求，因此以美國為首的世界各軍事大國都在積極完善情報傳輸網絡。 為提高情報傳輸網絡帶寬資源的利用率，結合情報傳輸網絡建設的實際情況，本文提出了流量控制系統(tǒng)解決方案，并從總體設計、總體框架、體系結構、功能模塊以及系統(tǒng)部署模式等方面對流量控制系統(tǒng)進行了設計。 針對隨機端口、動態(tài)端口以及加密數據流等問題，在對比分析端口識別、深度包檢測（DPI）以及深度/動態(tài)流檢測（DFI）等技術的基礎上，提出了一種DPDFI聯合檢測法，并以此為核心從設計目標、總體框架、工作流程以及功能模塊等方面設計實現了流量識別方法；采用多核處理和并行計算的硬件平臺，兼顧了執(zhí)行效率。 本文采用流量識別率測試實驗，對流量識別方法的有效性進行驗證，結果顯示該方法與深度包檢測（DPI）相比，在保持較高效率的基礎上流量識別率提高了6.63%；為了說明該方法的應用價值以及流量控制系統(tǒng)的作用，在實際網絡中進行了測試，測試結果表明能夠滿足情報傳輸網絡的實際需求。最后本文指出了該方法的不足之處以及下一步的研究方向。
[Abstract]:The information transmission network is one of the main ways to transmit intelligence information. With the continuous application of a large number of advanced information technology, the great demand for information transmission capability is brought forward. In such a background, it is important to analyze and process the military intelligence information, so that the military intelligence work must have the capability of safe and rapid information transmission. With the advancement of the new military reform, all the countries of the world are actively improving the information transmission network At present, the network bandwidth of the information transmission of our army is limited, and the large-flow traffic such as P2P and streaming media is crowded with the bandwidth resources. Therefore, it is in urgent need to control the network traffic and ensure the real-time requirements of key business such as intelligence information, so as to improve the data transmission of the information transmission network. Force. Modern operation, the situation of the battlefield is changing rapidly, and the command must also be fast and timely, which makes the information transfer capability higher In order to win the information war, it is necessary to master the information advantage, and one of the key to the information advantage is to have the fast information transmission With the advance of the new military reform, especially with the theory development and practice of the joint operation, the non-war military operation and the distributed network operation, the new army mission mode has constantly proposed new information transmission capability. As a result, all the military powers of the world, led by the United States, are actively improving the information transfer In order to improve the utilization of the network bandwidth resources of the information transmission and the actual situation of the construction of the information transmission network, this paper presents the solution of the flow control system, and from the overall design, the general framework and the flow control system in aspects of architecture, function module and system deployment mode, and the like A kind of DPDFI combined detection method is put forward on the basis of comparison analysis port identification, deep packet detection (DPI) and depth/ dynamic flow detection (DFI) and so on, based on the technologies such as random port, dynamic port and encrypted data stream. the core is designed to realize the flow identification method from the design goal, the overall framework, the working process and the functional module and the like, and adopts a multi-core processing and parallel computing hardware platform, In this paper, the effectiveness of the flow identification method is verified by the flow rate recognition test. The results show that the method is more efficient than the deep packet detection (DPI). The rate is increased by 6.63%; in order to illustrate the application value of the method and the function of the flow control system, the test is carried out in the actual network, and the test results show that the information can be satisfied The actual demand of the transmission network is pointed out in the last paper.
【學位授予單位】：吉林大學
【學位級別】：碩士
【學位授予年份】：2014
【分類號】：TP393.06

【參考文獻】

相關期刊論文 前10條

1 楊超;貴穎祺;;網絡流量分析及控制策略[J];電腦知識與技術;2011年12期

2 段生林;特征檢測在入侵檢測系統(tǒng)中的應用[J];華南金融電腦;2004年04期

3 呂效紅;;基于Linux內核的BT流量控制的原理與實現[J];黃山學院學報;2010年03期

4 張玉沖;蔡皖東;丁要軍;;一種適用于應用層協(xié)議的特征提取算法[J];計算機工程;2012年04期

5 陳偉;胡磊;楊龍;;基于載荷特征的加密流量快速識別方法[J];計算機工程;2012年12期

6 楊虎;張大方;謝鯤;雷淵明;何施茗;;Netfilter/Iptables框架下基于TCP滑動窗口的串行流量控制算法[J];計算機工程與科學;2009年10期

7 陳偉;蘭巨龍;張建輝;;基于端點特征的P2P流媒體識別方法[J];計算機應用研究;2012年07期

8 曾武;張國兵;黃皓;;基于網絡處理器的防火墻流量控制技術[J];計算機應用研究;2006年11期

9 林志興;;校園網絡流量控制分析與實施[J];三明學院學報;2009年04期

10 朱國勝;余少華;;高速低功耗深度報文檢測方法[J];通信學報;2011年04期

本文編號：2443075