基于IPv6的网络与信息资产发现关键技术研究

Study of key technologies of network and information asset discovery in IPv6 Network

随着IPv6的大规模部署,传统意义的扫描方法已无法完成对资产的快速发现。针对于此,本研究采用无状态扫描技术,收发线程分离,加快扫描速度,采取高速匹配算法,对网络与信息资产的协议指纹进行匹配。同时辅助以管理手段,大大减少了扫描的地址空间,提高了网络与信息资产的发现效率。其次,构建协议指纹库,获取大量通用信息作为发现资产的基础。最后,采用P2P方法进行分布式部署,实现数据同步与快速检索,以满足大规模IPv6网络下的网络与信息资产的发现。

With the large-scale deployment of IPv6,the traditional methods of scanning cannot support the fast discovery of assets.This study uses stateless scanning technology,sending and receiving threads to separate,speed up scanning,and high-speed matching algorithm,by that way the information assets and network protocol fingerprints are matched.The auxiliary management can greatly reduce the scanning address space and improve the discovery efficiency of the network and information assets.Secondly,fingerprint library can provide a large amount of general information as the basis for discovering assets.Finally,this P2 P method is used for distributed deployment to achieve data synchronization and fast retrieval to meet the discovery of network and information assets under large-scale IPv6 networks.