互聯(lián)網安全和服務質量保證體系及技術研究.pdf

1、北京郵電大學博士學位論文互聯(lián)網安全和服務質量保證體系及技術研究姓名：柴平瑄申請學位級別：博士專業(yè)：通信與信息系統(tǒng)指導教師：程時端20040410北京郵電大學博學位論文AbsfraclAbstractWiththedevelopmentofIntemet，Newapplications，suchasEBusiness，E—Government，VoiceoverIPRemoteEducation，andNetMeeting，needmor

2、erigoroussupportofsecurityandqualityofservices(QoS)thanthetraditionalIPservicesDuetotheopenarchitectureofInternet，somenetworksecuritytechnologiesandmechanismsareneededtoprotectthenetworkandinformationThecurrentnetworksec

3、uritysystemsatealwaysdesignedwimspecialtechnologyandfunctionisonefoldItisdifficulttoensurethatthenetworksecuritysystemscouldprovidsufficientsecurityforthenetworkandservices；BecauseofthebesteffortcharacteristicsofInteract

4、，someQoSmechanismsandQoSmanagementarerequiredtoensllretheQoSofserviceThecurrentQoSmanagementsystemsarealwaysdesignedforspecialserviceInordertoprovidedifferentservices，differentmanagementsystemsareneeded；QoSmeasurementisi

5、mportantforQoSmanagementHoweverasanimportantfiliationofnetworkmeasurement，linkbandwidthmeasurementcurrentlyhasaninaccureateresultinhigh—speedlnlemetThisdissertationinvestigatesthefollowingcontents：networksecuritytechonol

6、ogyandsecuritymanagement，QoSmanagementarchitectureandQoSmeasurement，andlinkbandwidthmeasurement，andsupposesolutionsfor也oseabovemenfionedissuesThemaincontributionsofthisdissertationare：1Adistributedintrusiondetectionfrana

7、ework(DIDl0isbuiltDIDFintegratesfirewallintrusiondetecton，andincidentresponsetechnologies，andconstitutesasecurityarchitecturethathasmanagement，protection，detection，andresponseabilitiesBasedonDIDFadistributedintrutiondete

8、ctionsystem(Dn3S)isdevelopedAhigh—speedpacketfilter(HSPF)algorithmispresentedHSPFhasbeenadoptedbythepacketfilterfirewallofDIDS2ThisthsisinvestigatestheneedsofQoSmanagementandpresentsaQoSmanagementarchitecture(QoSMA)QoSMA

9、shieldsthespecificrequirementofdifferentservicesanddifferentnetworkequipments，andeanprovideQoSfordifferentservicesAQoSmeasurementmechanismispresentedThemechanismcanprovidedistributedQoSinformationofservicesflowThisthsisa

10、lsointroducesaconceptofkeynetworksegment(K2qS)ofperformanceandgivethealgorithmtolocatekeynetworksegment3ThisthsisAnalysesthelinkdelay(LD)modelsandtechnologiesoflinkbandwidthmeasurementandbuildsalinkandnodedelay(LAND)mode

11、lforlinkbandwidthmeasurementLANDisinoFeadaptabletothecurrenthighspeedIntemetthanLDforittakestheprocessingabilityofnetworknodeintoaccountBasedonLAND，alinkbandwidthmeasurementalgorithm，wecallitLBEM，wasproposedLBEMcanmeasur