流身份鉴别技术研究进展

Survey of network flow identification technology

由于流交换中流源身份的不可信、流交换范围的不可控和流路径的不可追踪问题与日俱增,流身份鉴别技术逐渐成为近年来网络安全研究的热点。为了更深入地解决流身份鉴别技术存在的不足,采用文献分析方法论证了必要性,简述了其应用领域,介绍了相关概念和基本框架;概括了流身份鉴别技术面临的关键问题——流变换,并且多维度地将现有方案进行分类,从多个角度进行对比分析。最后归纳了该领域当前的热点和发展前景,以期为下一步研究提供参考。

Because of the increasing number of untrusted flow identity problem, uncontrolled flow exchanging problem and un- traceable flow path problem, network flow identification technology has become the hot spot in the study of network security in recent years. To find deficiencies of the existing flow identification technology, this paper firstly briefly introduced the necessi- ty, application fields, related concepts and basic framework by using literature analysis method. Besides, it discussed the key problem： flow transformation, of network flow identification technology. What＇ s more, it＇ s the first time to divide current schemes into several categories. It concluded typical schemes in comparison multidimensional of each class. Finally, it pointed out the existing problems so as to providing reference for further research.