端口扫描与检测技术的实现

包括论文,设计,论文字数:13259,页数:27

摘  要
随着Internet日益广泛的应用，黑客攻击行为也是有增无减。如何有效地抵御这种攻击行为，一直是信息安全领域的焦点。
而其中，端口扫描技术吸引了越来越多人的关注。端口扫描是黑客搜集目标主机信息的一种常用方法。为了有效地对付网络入侵行为,对端口扫描进行研究是非常有益和必要的。攻击者在攻击一个目标时，首先要获取目标的一些基本信息，端口扫描就是其中最简单最重要的方法之一，它可以扫描目标机器中开放的端口，从而确定目标机器中提供的服务，为下一步攻击做准备。针对端口扫描技术，相应的端口扫描检测技术显的越发重要，作为网络安全技术中的一个重要课题，端口扫描检测技术意义重大。
本文首先阐述了端口扫描技术以及端口扫描检测技术的基本原理和常用方法，然后在此基础上设计了一个对基于网络的端口进行扫描，能判断出目标主机端口开放情况的程序以及一个从网络信息的数据包的捕获和分析着手，再通过统计判断是否存在端口扫描行为的程序，最后从攻击和防御的角度对端口扫描和检测技术作了演示及分析。

关键词：端口；端口扫描；数据包捕获；端口检测

The Realization of Port Scanning and Detecting Technology
Abstract
As the widely applying of Internet, the attacking behavior made by hacker is increasing but not decreasing. How to resist this kind of attacking behavior is always the key point of the domain of the information security.
And the port scanning draws people''s attention more and more. Port scanning is a usual method which is used by the hacker to collect the information of the target main processor. In order to deal with the invading behavior of the Internet effectively, it is very useful and necessary to work on the port scanning. When an attacker attacks to a target, he or she will firstly gets some basic information about the target, and the port scanning is one of the most simple and important methods which can scan the opening Port of the target machine to make sure the offering service made by the target machine, and it is a preparation to the next attacking. The port detecting seems more and more important referring to the port scanning. As an important task of the secure technique of Internet, the port detecting is of great significance.
In this thesis, it firstly elaborates the basic principles and usual methods of the port scanning. On this basis, it then designs a program which can scan the Port of the Internet, and assess the opening situation of the target main processor, and the other program which begins on capturing and analyzing the information packet of Internet, and then assess whether there is a behavior about port scanning through statistic analyses. Lastly, it demonstrates and analyses the technology of port scanning and port detecting from the viewpoint of attacking and resisting.

Key Words：port; port scanning; packet capture; port detecting

目  录

1 引言 1
1.1 本课题研究的意义 1
1.2 本课题的研究方法 2
2 端口扫描概述 2
2.1 基本概念 2
2.2 端口扫描原理 3
2.3 端口扫描技术简介 5
3 检测端口扫描概述 7
3.1 端口扫描检测的分析 7
3.2 普通端口扫描检测技术概述 8
3.3 慢速端口扫描检测技术概述 9
3.4 端口扫描的分布式检测概述 9
3.5 主流的端口扫描工具 11
4 端口扫描的实现 12
4.1 扫描程序的设计原理 12
4.2 程序流程图 12
5 检测端口扫描的实现 13
5.1 检测程序的设计原理 13
5.2 程序流程图 13
5.3 设计实现重点代码 14
6 性能测试 18
6.1 端口扫描程序性能测试 18
6.2 检测端口扫描程序性能测试 19
结    论 20
参考文献 21
致    谢 22
声    明 23