基于消息中间件的分布式网络扫描

Distributed Network Scanning Based on Message Middleware

网络扫描是网络安全评测和网络管理的重要手段。针对传统单点主动扫描方法与Zmap、Nmap工具均存在带宽资源利用受限、扫描效率低与CPU使用率高等问题,结合消息中间件的分布式网络扫描技术,提出一种分布式网络扫描架构和任务调度算法。利用消息中间件实现信息同步和扫描结果回传,并构建一种分布式网络扫描任务调度模型。实验结果表明,相比传统的单点主动扫描技术,基于消息中间件的分布式网络扫描技术在保证扫描准确率的同时,CPU使用率与扫描响应时间均降低约10%。

Network scanning is an important means of network security evaluation and network management.The traditional single-point active scanning method and tools including Zmap and Nmap suffer from limited bandwidth resource utilization,low scanning efficiency and significant CPU usage.This paper proposes a distributed network scanning architecture and task-scheduling algorithm based on the distributed network scanning technology of message middleware.The algorithm uses message middleware to synchronize information and return scanning results,and constructs a task-scheduling model for distributed network scanning.The experimental results show that compared with the traditional single-point active scanning technology,the proposed distributed network scanning technology based on message middleware can ensure the scanning accuracy while reducing CPU usage and scanning response time by about 10%.