Research And Implementation Of The Synchronization Algorithm Of Address And Port Hopping Communication System Based On Netfilter

Today,a lot of Internet services are based on C/S(C lient/Server)mode,the servers have become the main target of attackers.In the traditional security protection,the attackers and defenders are in the inequality state,attackers have a better position than defenders,and the activity of attackers relay on the static state,the certainty and the similarity of the target hosts.Therefore,mobile target defense improve the servers' security through configuring dynamic,random,diverse mechanisms and strategies to increase the cost of the successful attacks.Mobile target defense focuses on server identification information technology in the network layer,mainly about server address,port hopping technology.To address,port hopping communication system,the address,and port of the server hop periodic,the hopping mode and connection relationship between the client and the server need to be kept to ensure the continuous communication,and the key is to make the client and the server to be clock synchronization.This paper analyzes the existing synchronization technology about their advantages and disadvantages,and improves the method of time synchronization.The method can solve the problem caused by the network delay and congestion to achieve clock synchronization.At the same time,this paper studies the existing address and port hopping technology,a nd proposes a server address,port hopping communication technology based on Netfilter mechanism of Linux kernel.The system spends less resource to achieve server address and port hopping efficiently.At the end,the paper tests the synchronization mechanism based on the prototype system,to verify the validity and the application value of the synchronization algorithm based on time slot overlap.