基于模板解析的天地一体化信息网络用户行为流量回放技术

doi:10.11959/j.issn.2096-8930.2021032

摘要/Abstract

摘要：

面向行为复杂与协议多样的天地一体化信息网络用户行为仿真需求，设计一种基于云计算与虚拟化技术的天地一体化信息网络用户行为流量回放架构。进一步研究基于深度报文解析的用户行为流量自动解析与模板生成技术，以及基于流量模板的天地一体化信息网络用户行为流量回放技术，实现各类用户行为流量的统一、自动化和逼真仿真。构建具有6颗天基骨干网卫星、66 颗天基接入网卫星的天地一体化信息网络仿真场景，宽带用户行为与窄带用户行为协议流量模板生成与流量回放实验验证表明，该方法能够实现多样化的用户交互行为的仿真，可为天地一体化信息网络仿真提供有效支撑。

关键词: 天地一体化信息网络, 用户行为仿真, 流量回放, 流量模板, 云计算

Abstract:

Faced the needs of user behavior emulation of the space-integrated-ground information network with complex behaviors and diverse protocols, an architecture based on cloud computing and virtualization technologies for replaying user behavior traffi c in the spaceintegrated-ground information network was designed.Furthermore, a user behavior traffi c automatic analysis and traffi c profi le generation technology based on deep packet inspection, and a user behavior traffi c replay technology of the space-integrated-ground information network based on traffi c profi le were researched, to achieve unifi ed, automated, and realistic simulation of miscellaneous kinds of user behavior traffi c.An emulation scenario of a space-integrated-ground information network with 6 space-based backbone network satellites and 66 space-based access network satellites was constructed.The experimental verifi cation of protocol traffi c profi le generation and traffi c replay of the broadband user behavior and narrow-band user behavior showed that the emulation of diversifi ed user interaction behaviors could provide eff ective support for the emulation of the space-integrated-ground information network.

Key words: space-integrated-ground information network, user behavior emulation, traffi c replay, traffi c profi le, cloud computing

中图分类号:

TP393

薛青松, 王晓锋. 基于模板解析的天地一体化信息网络用户行为流量回放技术[J]. 天地一体化信息网络, 2021, 2(3): 66-75.

Qingsong XUE, Xiaofeng WANG. User Behavior Traffi c Replay Technology for Space-IntegratedGround Information Network Based on Profi le Analyzing[J]. Space-Integrated-Ground Information Networks, 2021, 2(3): 66-75.

图/表 12

图1

表1

表2

图2

图3

图4

图5

图6

表3

表4

图7

图8

参考文献 25

[1]	张乃通, 赵康僆, 刘功亮 . 对建设我国“天地一体化信息网络”的思考[J]. 中国电子科学研究院学报, 2015,10(3): 223-230.
	ZHANG N T , ZHAO K L , LIU G L . Thought on constructing the integrated space-terrestrial information network[J]. Journal of China Academy of Electronics and Information Technology, 2015,10(3): 223-230.
[2]	秦智超, 张平, 范鑫鑫 ,等. 面向天地一体化信息网络的安全验证平台设计[J]. 网络与信息安全学报, 2016,2(8): 39-47.
	QIN Z C , ZHANG P , FAN X X ,et al. Design of security verification platform for the integrated space-ground network[J]. Chinese Journal of Network and Information Security, 2016,2(8): 39-47.
[3]	李春艳, 张学杰 . 基于高性能计算的开源云平台性能评估[J]. 计算机应用, 2013,33(12): 3580-3585.
	LI C Y , ZHANG X J . Performance evaluation on open source cloud platform for high performance computing[J]. Journal of Computer Applications, 2013,33(12): 3580-3585.
[4]	FELTER W , FERREIRA A , RAJAMONY R ,et al. An updated performance comparison of virtual machines and Linux containers[C]// Proceedings of 2015 IEEE International Symposium on Performance Analysis of Systems and Software (ISPASS). Piscataway:IEEE Press, 2015: 171-172.
[5]	WANG X F , CHEN X Y , YE H Y ,et al. Cloud-based experimental platform for the space-ground integrated network[J]. Wireless Communications and Mobile Computing, 2020: 1-20.
[6]	WU H , LIU H R , WANG B L ,et al. Accurate traffic replay based on interactive sequence and timestamp[C]// Proceedings of 2017 IEEE 9th International Conference on Communication Software and Networks (ICCSN). Piscataway:IEEE Press, 2017: 1107-1110.
[7]	刘渊, 张浩, 叶海洋 ,等. 面向天地一体化信息网络的卫星链路仿真研究[J]. 通信学报, 2018,39(4): 56-67.
	LIU Y , ZHANG H , YE H Y ,et al. Research on satellite link emulation for space-ground integration information network[J]. Journal on Communications, 2018,39(4): 56-67.
[8]	蒋姝丽, 刘渊, 王晓锋 . 天地一体化信息网络宽带用户行为仿真技术[J]. 计算机工程与应用, 2020,56(10): 75-82.
	JIANG S L , LIU Y , WANG X F . Broadband user behavior emulation technology for space-ground integrated information network[J]. Computer Engineering and Applications, 2020,56(10): 75-82.
[9]	张光杰, 叶海洋, 王晓锋 . 基于多尺度虚拟化的卫星终端用户行为仿真[J]. 计算机工程, 2019,45(8): 165-172,189.
	ZHANG G J , YE H Y , WANG X F . User behavior simulation in satellite terminal based on multi-scale virtualization[J]. Computer Engineering, 2019,45(8): 165-172,189.
[10]	方熙, 曾剑平, 吴承荣 . 背景流量生成模型综述[J]. 计算机应用, 2019,39(S1): 124-131.
	FANG X , ZENG J P , WU C R . Summary of background traffic generation model[J]. Journal of Computer Applications, 2019,39(S1): 124-131.
[11]	焦久隆 . 基于流量矩阵的背景流量建模与生成技术研究[D]. 哈尔滨:哈尔滨工业大学, 2016.
	JIAO J L . Research on background traffic modeling and generation method based on traffic matrix[D]. Harbin:Harbin Institute of Technology, 2016.
[12]	张华川, 田杰, 许静 . 自相似网络流量模拟的分布式系统的设计与实现[J]. 电子学报, 2009,37(S1): 31-35,30.
	ZHANG H C , TIAN J , XU J . The design and implementation of distributed system for self-similar network traffic simulation[J]. Acta Electronica Sinica, 2009,37(S1): 31-35,30.
[13]	HONG S S , WU S F . On interactive Internet traffic replay[M]// Lecture Notes in Computer Science. Berlin,Heidelberg: Springer Berlin Heidelberg, 2006: 247-264.
[14]	HUSSAIN A , PRADKIN Y , HEIDEMANN J . Replay of malicious traffic in network testbeds[C]// Proceedings of 2013 IEEE International Conference on Technologies for Homeland Security (HST). Piscataway:IEEE Press, 2013: 322-327.
[15]	林秀 . 基于TCPCopy的在线引流压测通用架构设计[J]. 电信技术, 2014(11): 30-33.
	LIN X . General architecture design of online drainage pressure measurement based on TCPCopy[J]. Telecommunications Technology, 2014(11): 30-33.
[16]	李凤华, 殷丽华, 吴巍 ,等. 天地一体化信息网络安全保障技术研究进展及发展趋势[J]. 通信学报, 2016,37(11): 156-168.
	LI F H , YIN L H , WU W ,et al. Research status and development trends of security assurance for space-ground integration information network[J]. Journal on Communications, 2016,37(11): 156-168.
[17]	WU L H , LI Y , ZHOU C ,et al. Statistic analysis of data access behavior in the mobile internet[C]// Proceedings of 2013 IEEE/CIC International Conference on Communications in China (ICCC). Piscataway:IEEE Press, 2013: 89-93.
[18]	VERKASALO H , . Analysis of smartphone user behavior[C]// Proceedings of 2010 Ninth International Conference on Mobile Business and 2010 Ninth Global Mobility Roundtable (ICMBGMR). Piscataway:IEEE Press, 2010: 258-263.
[19]	LI H F , ZHOU H C , ZHANG H K ,et al. EmuStack:an OpenStackbased DTN network emulation platform[C]// Proceedings of 2016 International Conference on Networking and Network Applications (NaNA). Piscataway:IEEE Press, 2016: 387-392.
[20]	LI Y , HUI P , JIN D P ,et al. Delay-tolerant network protocol testing and evaluation[J]. IEEE Communications Magazine, 2015,53(1): 258-266.
[21]	KUMAR R , GUPTA N , CHARU S ,et al. Open source solution for cloud computing platform using OpenStack[J]. International Journal of Computer Science and Mobile Computing, 2014,3(5): 89-98.
[22]	ZHANG S H , MENG X X , WANG L H . SDNForensics:a comprehensive forensics framework for software defined network[C]// Proceedings of the International Conference on Computer Networks and Communication Technology (CNCT 2016). Paris,France:Atlantis Press, 2017.
[23]	SHIRAVI A , SHIRAVI H , TAVALLAEE M ,et al. Toward developing a systematic approach to generate benchmark datasets for intrusion detection[J]. Computers ＆ Security, 2012,31(3): 357374.
[24]	SHEN C F , HUANG L J . On detection accuracy of L7-filter and OpenDPI[C]// Proceedings of 2012 Third International Conference on Networking and Distributed Computing. Piscataway:IEEE Press, 2012: 119-123.
[25]	GONCALVES F E , IANCU B A . Building telephony systems with OpenSIPS[M]. Birmingham: Packt Publishing Ltd, 2016.

ID	源文件名	协议类型			路径
流量编号	分类的源文件	宽带应用协议名称	TCP/UDP	模板占用字节数	协议模板存放路径

ID	源文件名	协议类型	用户标识ID	用户名	IP地址
流量编号	分类的源文件	窄带应用协议名称	标识唯一用户	用于用户认证	模拟用户的IP地址

宽带用户节点	协议流量模板	目标回放节点
User1	网页浏览行为	Station1
User2	文件传输行为	Station1
User3	电子邮件行为	Station1

窄带用户节点	协议流量模板	用户ID	IP地址	目标回放节点
User4	注册	1586160××××~1586160××××	12.4.1.1 ~12.4.1.100	Station2
User5	短信	1586161××××~1586161××××	12.6.1.1~12.6.1.100	Station2
User6	通话	1586162××××~1586162××××	12.8.1.1 ~12.8.1.100	Station2