| With the rapid development of Internet technology, network security has become the great challenge with which people are confronted in information times. One of the reasons that network information probloms come into being are the holes exist in operating system or application software. The radical method to clear holes is to install patches. Therefore, patch management has become more and more important.The thesis mainly research to apply P2P technology into patch distribution can make use of the resources lying on the edge and avoid performance bottleneck of traditional C/S architecture through the P2P nodes each other's communication and collaboration.Afer analysing the disadvantages of existing patch management systems in the aspect of architecture, the thesis designs a hierarchical and regional patch distribution Peer-to-Peer routing model which introduces hiberarchy and sub-net partition in order to improve the management. Furthermore, the model organizes many service nodes into a high-powered and scalable topology and implements the function of resource location based on Chord algorithm.The thesis designs high-powered and practical distribution strategies on the basis of hierarchical and regional patch distribution Peer-to-Peer routing model. Moreover, it associates application-layer multicast algorithm with Chord algorithm in the interest of improving the efficiency in distributing patches and reducing the consumption of network bandwith.Finally, the thesis designs the hierarchical and regional patch distribution system. The system aims at distribuing patches actively, fast and downloading patches based on hierarchical and regional patch distribution Peer-to-Peer routing model. The system allows nodes to join or leave in order to enhance scalability and reliability. In the process of system implement, we design communication protocol based on XML that extends protocols flexibly according to needs. The thesis researches the CHAP protocol in order to validate the nodes when entering the system. This method enhances the system's security. The thesis solves the bad impact of NAT and firewall as clients join the system or nodes distribute patches to clients actively. The system's practical run instance proves the efficiency of the system. |
