Font Size: a A A

Regional Gateway Discovery Method Based On Active Measurement And Labeling

Posted on:2020-01-09Degree:MasterType:Thesis
Country:ChinaCandidate:L W ZengFull Text:PDF
GTID:2428330590974475Subject:Cyberspace security
Abstract/Summary:PDF Full Text Request
Network space mapping is the basis of network planning,visualization,network security and fault detection.The research on topology mapping is mainly divided into three fields.Including Physical device scanning,logical topology detection and attribute labeling.The methods we use when mapping network topology in a specific region include IP address geolocation,router geolocation and border gateway IP address discovery.IP address geolocation is the basis of network topology mapping.Because IP addresses are not directly related to geographic information,how to accurately geolocate IP addresses is a problem.Now people mainly geolocate IP addresses by registering information,using network topology maps or collecting user location information.However,there is a lack of evaluation method for the accuracy of the above geolocation technology.For router geolocation,there are many routers in the network space,they are the relay stations for information transmission.Today's network topology research is mainly for IP addresses,and there are few research on router topology.If the geographic information of the router can be accurately geolocated,the geolocating of the hosts connected to the router will become very simple.The border gateway IP address is the regional Internet gateway.If we can find the gateway information of the region,it can be more beneficial to map the internal network topology of the region.But there is also a lack of methods for discovering and evaluating regional border gateways.Based on the above problems,this paper designs and implements a regional gateway identification system.First collecting the current popular geolocation database and updating database automatic.Normalizing the geographical names in each database,and the design method integrates the geographic information of each geolocation database to generate a more accurate and comprehensive database.Finally,the geolocation database is analysis by coverage rate,coincidence rate,coincidence rate and accuracy rate.The coverage rate and consistency rate of the merged database is higher than other databases.Found that the coincidence rate between some geolocation databases reached more than 90%.Using landmark points to verify the merged database city-level geolocation accuracy rate is more than 92%.Collecting the CAIDA ITDK router-level topology data by using the converged database as IP address geolocation database.Split single interface routers and multi interface routers.Using three methods to geolocation these router.Based on the fact that all interfaces on the router should be in the same geolocation.An interfaceelection method is proposed to geolocate the router..Based on the fact that linked routers should be in the same place as possible,a neighbor election method is proposed to geolocate the router.In order to integrate the interface election and neighbor election methods,a comprehensive election method is proposed.Using the landmark point to verify the geolocation information,the results show that the three methods are higher in coverage and accuracy than the CAIDA geolocate router.The interface election method is the highest in accuracy and geolocation weight,and the highest coverage method is comprehensive election.Finally measure and download traceroute data.In the regional border gateway discovery method,the target candidate in China is selected,and the gateway candidate set in the path is filtered after labeling the attribute information for each IP address on the path.Use each attribute to find the corresponding suspected gateway IP address and vote for the candidate gateway IP address.Then use the monitoring points around the world to ping the IP address near the candidate gateway to get the first IP address with the smallest delay from the Chinese monitor point as the gateway to China.A total of 1,724 gateways were detected,and part of the gateway data was verified by an ISP,with an accuracy rate of 75%.Using the results of router geolocation and mapping the gateway to the router and verifying the geolocation accuracy,the accuracy rate is over 80%.In this paper,finally realized and analyzed the regional gateway identification system,and a comprehensive merging database with better comprehensive index is generated.Realized the router method with higher accuracy and identified the Chinese gateway in the border gateway IP address discovery method.Provided landmark data and results optimization methods for mapping specific regional network topology.
Keywords/Search Tags:Network topology mapping, IP geolocation, Router geolocation, Regional border gateway
PDF Full Text Request
Related items