【作者】 蒋旭卉；

【导师】 张宏科；

【作者基本信息】 北京交通大学 ， 通信与信息系统， 2007， 硕士

【摘要】 随着互联网的发展,网络安全形势日趋严峻。骨干网是互联网发展的基石,其核心设备路由器一旦受到攻击,不能正常运行,网络的性能将受到很大影响,甚至瘫痪。网络攻击和安全紧密联系,只有掌握了攻击原理、过程、危害,才能制定完善的安全策略。本论文所涉及内容是项目“国家242信息安全计划——骨干网路由器和交换机的安全检验方法研究”的重要组成部分。论文首先分析了我国互联网、骨干网的发展现状,目前网络的主要安全威胁;阐述了研究骨干网路由器攻击方法的目的和意义,以及国内外研究现状和发展趋势。接着介绍了骨干网路由器的现状、体系结构特点、软件系统和安全功能。在此基础上结合攻击分类标准,提出了具有骨干网路由器特色的攻击分类方法,并深入研究了各类攻击的原理、步骤和危害。最后设计实现了两种骨干网路由器攻击方法,即大流量攻击和RIP欺骗攻击,并进行了测试,给出了测试结果。本论文的工作为骨干网路由器安全策略和检验标准的制定提供了依据。更多还原

【Abstract】 With the development of Internet, the network security becomes more and more important. Backbone network is the foundation of Internet. Attacking Backbone router, the core equipment of backbone network, can affect the capability of the network, even make it breakdown.Network attack technology is relative to security closely. We can constitute good security strategy after we master the principle, process and harm of attack.The content of this thesis is an important part of“Research of Security Verifying Methods for Backbone Routers and Switches”, which is one of the National 242 Information Security Projects. The thesis is organized as follows. First, it analyzes the status quo and threat of Internet and backbone network, the aim and significance of researching attacks. It also analyzes the status quo and developing direction of this research. According to the analysis of the backbone router’s status quo, architecture, software system and security and the attack technology classification standard, this thesis puts forward a new method to classify the attack technology, which fits for backbone routers, and then it researches the principle, process and harm of every class of attacks. Finally, it designs, implements and tests two methods used for attacking, which named traffic flooding attacks and RIP spoofing respectively. The work of this thesis provides gist for constituting the security strategy and testing standard.更多还原