一种改进的分段标识扫描系统的研究

Research on an improved section identification scanning system

由于网络的异构性,防火墙和入侵检测系统的监测,扫描过程中往往遇到不期望的阻碍.为了能更好把握主机和网络的安全状况,需要对网络扫描系统的隐蔽性进行研究.设计了具有一定隐蔽性的网络扫描系统,实现了多种当前流行的网络扫描技术,通过优化扫描端口、减慢扫描速度、伪造垃圾数据包等手段增强扫描的隐蔽性;并对IPID扫描技术进行了改进,提出了一种名为随机分块二分法的改进算法,提高了普通IPID扫描的效率.

Due to the heterogeneity of network and firewall, IDS monitoring, network scanning often encounter unexpected obstacles. In order to have the situation of network security well in hand, we need to research the convert network scanning techniques. This paper designed a covert network scanning system which used lots of popular network scanning technologies and made scanning even more secret by optimizing the scanning ports, slowing down the scanning and forging data packets. This thesis presented an improvement of the IPID scanning technique which named random chunk binary algorithm and improved the efficiency of the ordinary.