logging in or signing up ch23 nat vpn firewall ids p2p aSGuest16484 Download Post to : URL : Related Presentations : Share Add to Flag Embed Email Send to Blogs and Networks Add to Channel Uploaded from authorPOINT lite Insert YouTube videos in PowerPont slides with aS Desktop Copy embed code: (To copy code, click on the text box) Embed: URL: Thumbnail: WordPress Embed Customize Embed The presentation is successfully added In Your Favorites. Views: 94 Category: Entertainment License: All Rights Reserved Like it (0) Dislike it (0) Added: April 10, 2009 This Presentation is Public Favorites: 0 Presentation Description No description available. Comments Posting comment... Premium member Presentation Transcript ?23? ?????? : 23.1 ????? 23.2 NAT( Network Address Translation ) 23.3 ????? 23.4 VPN?? 23.5 ?????? 23.6 P2P????? ?23? ?????? 23.1 ?????????? : 23.1 ?????????? ???????(Proxy)????????: ??????????Internet,???????????????IP??? ?????????Internet?????????????? ?????????????????????? ?????????Internet???????????? ???????????? 23.1.1 ????????(1) : 23.1.1 ????????(1) 1?Proxy????? ?????????????????????:?????????????;?????????Internet?????????????????????????????????????????????????“?????”?“????”? 2? Proxy????? ??????????????????,??????Internet???,????/??????????????????????Internet????????????Internet??,??,?????????????????,????????????,???????? 23.1.1 ????????(2) : 3??????????? Proxy????????Socket????????????(????)??Proxy??Socket????,Proxy????????????????????????Socket???????,??????????,Proxy??Socket?????????????????????????,Proxy????????????????,????Socket????????,??????? 23.1.1 ????????(2) ?????????? : ?????????? 23.1.2 ???????? : 23.1.2 ???????? ????????????Internet?????,????????: 1?????IP?? 2???????????????? 3????????????????? 4???????????????? 5?????????? 6??????? 23.1.3 ????????? : 23.1.3 ????????? ???????????,???????,???????WWW???FTP?????Telnet?????Email???????TCP/UDP???Socks???????????????Internet????????????????????????????WinGate?WinRoute?SyGate????????? DIY: ?SyGate?????? : DIY: ?SyGate?????? SyGate???????????,????????,?Office????????????????????,??????Home??,????????,????????? SyGate?? ??SyGate ??SyGate??? ??SyGate??? SyGate?? : SyGate?? SyGate??????,??Modem,??Internet??,????????????PC???Internet?,????????????????????????????????,????????? ??SyGate???????????????????????????????????????????????????(?????10?????),???????????????????????,????????????????????????,??????????????????,??????? ??SyGate : ??SyGate ??SyGate??? : ??SyGate??? ??SyGate??????,??“??”???????????????????,????“??”??,??SyGate?????? ??“??????”??“????”,????????????,??“NVIDIA”??,??????“??????”,??????,???“??????”,???“??Internet/ISP??”???????,“???”?????????? ??????“??????DHCP”,??????????IP,??“??DNS??”,????????????? IP?????????IP?????????,???????????IP????? ??SyGate??? : ??SyGate??? ??SyGate??? : ??SyGate??? ???????????,?????SyGate?????,??????IP??,????SyGate???????????SyGate??????DHCP??,IP?????????????????,IP??????????IP???????,???DNS??????????IP??? ??SyGate??????????????????,??:?????????SyGate????????????????,?????????“?????”?????????SyGate????????TCP/IP,?????????? ??????? : ??????? ??????:??????????,??????????????????: (1)?????,????????????,????????? (2)?????,????????????,?????????? (3)????,???????????,??????? 23.2 NAT( Network Address Translation ) : 23.2 NAT( Network Address Translation ) ?RFC1597?????????(????,Private Internet,Intranet) ???IP???IANA???????????: 10.0.0.0 - 10.255.255.255 A single Class A network 172.16 .0.0- 172.31 .255.255 16 contiguous Class B networks 192.168.0.0 - 192.168.255 .255 256 contiguous Class C networks NAT??(RFC 1631) : NAT??(RFC 1631) NAT????????(??)???????????????? NAT???????????(???????): ???????(Source NAT,???SNAT),?IP??(masquerade) ????????(Destination NAT,???DNAT)? ????(???????????): ??NAT(static NAT)-???? ??NAT(Dynamic NAT)-??? ??(Overloading)-??? ?? SNAT ??IP??????? ????????????IP?? DNAT ???? NAT???? : NAT???? ?????,???????IP???????????: 192.168.32.10 ????? 213.18.123.110. ??????,?????IP?????IP???????: 192.168.32.10 ?????213.18.123.100 to 213.18.123.150. ?????????IP?? ??(Overloading)????????,?????IP????????????IP?????? Outgoing Web Client Through NAT : Internet 10.0.0.1 10.0.0.4 10.0.0.3 10.0.0.2 Web server a b c NAT 204.1.1.10 Connection request to port 80 from ‘c‘ to <web server> source 10.0.0.4, port 1025. 10.0.0.4, port 1025 mapped to 204.1.1.10, port 2000 Connection request from ‘c’ forwarded to <web server> source 204.1.1.10, port 2000. Request received and accepted. Outgoing Web Client Through NAT Outgoing Web Client Through NAT : Internet 10.0.0.1 10.0.0.4 10.0.0.3 10.0.0.2 Web server a b c NAT Response sent to 204.1.1.10, port 2000. Outgoing Web Client Through NAT Translate 204.1.1.10, port 2000 to 10.0.0.4 port 1025 Slide 20: Internet Router 24.88.48.47 with NAT that Masquerades Host 192.168.0.10 Web Client 192.168.0.20 Host 192.168.0.30 Host 192.168.0.40 Web Server port 80 FTP Server port 21 Web Server 130.27.8.35 To 130.27.8.35:80 from 192.168.0.20:Y To 130.27.8.35:80 from 24.88.48.47:x To 24.88.48.47:x from 130.27.8.35:80 To 192.168.0.20:Y from 130.27.8.35:80 23.3 ????? : 23.3 ????? ?????? ????????????????????????????????????,????????????????????????????????????????????????,???????????? Firewall ???????? : ???????? ??????????????????? ???????????????????? ????????? ????????????? : ????????????? ???????????(IDS) ?????? IPSec VPN?? ???? ??????? : ??????? ?????????????? ???????? ???????????????? ?????? : ???? ?? ???? ???? ???? ????:?????URL???HTTP?? ????????? ?????? ???????? : ???????? ??????? ??????? ????????? ???????? ?????? ??????? : ??????? ???(Packet Filtering)??????????????? ????????????????,????????(Access Control Table) ?????????????????????????????????????,???????????????????? ?????????? ? ?????? : ?????? ???????: ????? ????:???????????????? ????:??????????? ??????? IP???????? ??(TCP?UDP?ICMP?) TCP/UDP?????? TCP???ACK? ICMP???? ?????? : ?????? ?????:??10.1.1.1???????????????,??TCP???????????? ?????:?????20??????10.1.1.1?????,??TCP??????????? ?????:?????20??????10.1.1.1??1024???,????TCP???????????? ?????? : ?????? ??????? ??????????? ??????????? ?????????? Slide 31: IP????? ???????? Internet ??? ??? ??? Internet R ??? ??? ??? Slide 32: ??????: ???????????????? ?????????,??????????? ??????????? ??????: ??????????? ??????????????? ??????????? ??????? : ??????? ?????????: ??????????????????????,??????????? ????????????? ?????????TCP???????TCP???????? ?????????????????????????????? ????????? : ????????? ?????(Application Level Gateways)?????????????????????????????????????????????,???????,?????????????????,????? ???????????????????,???????????????????????????????,??????????????????,???????????????????????????????,?????????????? Slide 35: ?????(Application Level Gateway) ??????????????????????,???????????????? Internet ?????? HTTP ?? : HTTP ?? ??? ??????? ???? ??????,?????? ?????? ???????? ????Contents Contents(Java Applet, JavaScript, ActiveX) ????????? : ????????? ?????? ??????? ?????? ???????? : ???????? ????(Proxy Service)????????TCP??(Circuit Level Gateways or TCP Tunnels),?????????????????????????????????????????????,?????????????????????????????????????" ??",????????????" ??"???,???????????????????,????????????????????? ??,?????????????????????,????,??????????????????????,???????? Slide 39: ????????(Proxy Server) ??????????????? ????????TCP??,??????????,??????????? Internet R ??? ????? ??? ?????? : ?????? ???????????:?????,????????????Internet??,??????????????,??????????????????????,??????Internet??????????????,????????????????????? ???????????:??????????,???????,??????????????????,??????Internet?????????????????????,???????????????????????????? ??????????? : ??????????? ???? : ???? ?????????????????????? ???????????????? ????????????????? ????????,?TELNET?FTP? ???????????,??????????????? Slide 43: ??????????? ???????????????(DMZ)?????,???????????????? Internet R ????? ??? ????? ??? R ???? ???DMZ ???????????(?) : ???????????(?) ??????????????????????DMZ???????????DMZ????????????????????????????,???????????,???????????????????????internet????????????DMZ???????????????,???????????????(????????????????)????????? DIY1 ??windows 2000 server??“???” : DIY1 ??windows 2000 server??“???” windows 2000???3??????: ????“tcp/ip??”???????,???windows nt 4.0?????????; ????????????(rras)???, ?????????windows 2000 server?; ??????ipsec???????,ipsec??windows 2000 server????????? ?????? 23.4 VPN?? : 23.4 VPN?? ??????(VPN:Virtual Private Network) ????????????????????????????????Internet?????????????????????,??????????????????? : ??????,?????????????????????????????,?????????????????? ???????????????????????????? ????,?????????????????,????Internet???????????,???????????????????????? IETF??????IP?VPN?:"??IP?????????????“ IPSec VPN????IPSec???Internet????VPN Tunneling through the Internet : Tunneling through the Internet ?VPN??? : ?VPN??? ???? VPN??????????????????????? ????(QoS)?? ???????????????,?????????,????????????QoS?? ???????? ????????,??????????? ???? ??????? ??VPN??????? : ??VPN??????? VPN?????????????,??????? ?????(Tunneling) ?????(Encryption & Decryption) ??????(Key Management) ????(Authentication) VPN?? : VPN?? ????? ??????????VPN IPSec VPN MPLS VPN SSL VPN ????? ????? LAN??? VPN : VPN Two main kinds Applications LAN -to- LAN VPN(LAN?VPN) Firewall-To-Laptop VPN(?????VPN) http://users.vnet.net/ids/vpn/topology.htm ?????VPN : ?????VPN LAN?VPN : LAN?VPN 23.5 ?????? : 23.5 ?????? ??????IDS(Intrusion Detection System)?????????????,?????????????????????????????? ??????????? : ??????????? ?????????????????????,?????????????????????????????????????????????????????????????,??????????????????????“??”???,??????????????????????? ?? : ?? ??????????????,????????????????,?????????? 1?????????? 2?????????? 3?????????????????? 4?????????? ?????????????? : ?????????????? ?????????????,?????????????:???????????????????????? 1????????????:?????????????????????????????????????:??????????????????????????????,????????????????????????????????,??????????????,???????????????? 2????????????:?????????????????,????????????????,??????? ??????? : ??????? ???????????????: 1???????????? 2???????????? 3???????????? ????????:????????????????????????? ?????? : ?????? ???????????????,?????????,????????????????????????????????(??,??????)? ???????????????????:????????????????,??????????????? ??????? : ??????? ??????????????????????????????????,???????????,??????????????????????? ?????????,???????????????????????????????????????????????????????????????????????,??????????,??????????????????????????,?????????????????????,???????????????????,????????????,??????????????????????????? ????????? : ????????? ?????????????????????????????????????????????????????????????????,???????????? ????????????????:?????????????????????????????,??????????????????????????????,??????????????????????????????????,????????????????,?????????????????? DIY: ???????????? : DIY: ???????????? ???????????????????,??????????????,????????,????????????? ??????TCPView????????????????,????????? ??????? : ??????? ???????????????????????,?????????,????????,????????????????????????????: ????????????? ???? : ???? ??????????????,??????????????????????????????????? ????????????????????????????????,?????????????????????,????????????????,???????????????????,??????????????????????????????????? ???? : ???? ????(Analysis Schemes)??????????,??????????????????????????????????????????????????????????? ???? : ???? 0 0050 dac6 f2d6 00b0 d04d cbaa 0800 4500 .P.......M....E. 10 0157 3105 4000 8006 0000 0a0a 0231 d850 .W1.@........1.P 20 1111 06a3 0050 df62 322e 413a 9cf1 5018 .....P.b2.A:..P. 30 16d0 f6e5 0000 4745 5420 2f70 726f 6475 ......GET /produ 40 6374 732f 7769 7265 6c65 7373 2f69 6d61 cts/wireless/ima 50 6765 732f 686f 6d65 5f63 6f6c 6c61 6765 ges/home_collage 60 322e 6a70 6720 4854 5450 2f31 2e31 0d0a 2.jpg HTTP/1.1.. 70 4163 6365 7074 3a20 2a2f 2a0d 0a52 6566 Accept: */*..Ref 80 6572 6572 3a20 6874 7470 3a2f 2f77 7777 erer: http://www 90 2e61 6d65 7269 7465 6368 2e63 6f6d 2f70 .ameritech.com/p a0 726f 6475 6374 732f 7769 7265 6c65 7373 roducts/wireless b0 2f73 746f 7265 2f0d 0a41 6363 6570 742d /store/..Accept- c0 4c61 6e67 7561 6765 3a20 656e 2d75 730d Language: en-us. d0 0a41 6363 6570 742d 456e 636f 6469 6e67 .Accept-Encoding e0 3a20 677a 6970 2c20 6465 666c 6174 650d : gzip, deflate. f0 0a55 7365 722d 4167 656e 743a 204d 6f7a .User-Agent: Moz 100 696c 6c61 2f34 2e30 2028 636f 6d70 6174 illa/4.0 (compat 110 6962 6c65 3b20 4d53 4945 2035 2e30 313b ible; MSIE 5.01; 120 2057 696e 646f 7773 204e 5420 352e 3029 Windows NT 5.0) 130 0d0a 486f 7374 3a20 7777 772e 616d 6572 ..Host: www.amer 140 6974 6563 682e 636f 6d0d 0a43 6f6e 6e65 itech.com..Conne 150 6374 696f 6e3a 204b 6565 702d 416c 6976 ction: Keep-Aliv 160 650d 0a0d 0a e.... ???? : ???? 0 0050 dac6 f2d6 00b0 d04d cbaa 0800 4500 .P.......M....E. 10 0157 3105 4000 8006 0000 0a0a 0231 d850 .W1.@........1.P 20 1111 06a3 0050 df62 322e 413a 9cf1 5018 .....P.b2.A:..P. 30 16d0 f6e5 0000 4745 5420 2f70 726f 6475 ......GET /produ 40 6374 732f 7769 7265 6c65 7373 2f69 6d61 cts/wireless/ima 50 6765 732f 686f 6d65 5f63 6f6c 6c61 6765 ges/home_collage 60 322e 6a70 6720 4854 5450 2f31 2e31 0d0a 2.jpg HTTP/1.1.. 70 4163 6365 7074 3a20 2a2f 2a0d 0a52 6566 Accept: */*..Ref 80 6572 6572 3a20 6874 7470 3a2f 2f77 7777 erer: http://www 90 2e61 6d65 7269 7465 6368 2e63 6f6d 2f70 .ameritech.com/p a0 726f 6475 6374 732f 7769 7265 6c65 7373 roducts/wireless b0 2f73 746f 7265 2f0d 0a41 6363 6570 742d /store/..Accept- c0 4c61 6e67 7561 6765 3a20 656e 2d75 730d Language: en-us. d0 0a41 6363 6570 742d 456e 636f 6469 6e67 .Accept-Encoding e0 3a20 677a 6970 2c20 6465 666c 6174 650d : gzip, deflate. f0 0a55 7365 722d 4167 656e 743a 204d 6f7a .User-Agent: Moz 100 696c 6c61 2f34 2e30 2028 636f 6d70 6174 illa/4.0 (compat 110 6962 6c65 3b20 4d53 4945 2035 2e30 313b ible; MSIE 5.01; 120 2057 696e 646f 7773 204e 5420 352e 3029 Windows NT 5.0) 130 0d0a 486f 7374 3a20 7777 772e 616d 6572 ..Host: www.amer 140 6974 6563 682e 636f 6d0d 0a43 6f6e 6e65 itech.com..Conne 150 6374 696f 6e3a 204b 6565 702d 416c 6976 ction: Keep-Aliv 160 650d 0a0d 0a e.... NIDS??? : NIDS??? NIDS????????????? ????HUB ???? ???? ??? ????? Sensor Console ???? : ???? HUB IDS Sensor Monitored Servers Console ???? : ???? Switch IDS Sensor Monitored Servers Console ???????? (SPAN / Port Monitor) ???? : ???? Switch IDS Sensor Monitored Servers ??IP ???? : ???? IDS Sensors L4?L7 ???? ?? : ?? ???????????,??????????????????????????????????????????????????? 1??????????????,????????? 2?????:????????????????????,?????????????????? 3??????????????,????????????????,?????????? DIY: ??????:Snort : DIY: ??????:Snort Snort?????????????????????????????????IP ????????,????????,???????/?????????????????,?????????? Snort ?????*nix/Win32 ???? Snort??????????????? ????? : ????? ???????????? WinPcap_4_0.exe--http://winpcap.polito.it/--??????????? snort-2_0_0.exe--http://www.snort.org--Windows ???Snort ??? Slide 77: ?C:\Snort\rules????????snort.conf??,????: include C:\Snort\rules\1.rules ?C:\Snort\rules????????1.rules??,????: alert tcp any any -> 59.69.149.130 21 (content: "test"; msg: "FTP root login";sid:1;) Slide 78: ??snort ??????:c:\snort\bin>snort -c "c:\snort\etc\snort.conf" -l "c:\snort\logs" -d -e -X-X ????????????raw packet ??-d ??????????-e ????/??????????-c ??????snort ???????? 23.6 P2P????? : 23.6 P2P????? ?? ?? ????? ?????? P2P????? ????? 1.???P2P : 1.???P2P P2P:Peer-to-Peer ??(??,??)…;???… ???????????????????????????? ???????????(?????)????????(??????????) ???????????????/????,??????????? ????:??????ad-hoc?? ????????? : Sarnoff ’law:?????O(n):???????,?1???(??)???(n-1)???(??)? Metcalfe ’law:?????O(n2)????????,??1???????n-1???,????n(n-1)=n2-n???????? Reed ’law:?????O(2n):?????????????Cn2+Cn3+…Cnn-1+Cnn = 2n-n-1 ??? ????????? P2P??? : P2P??? ?????? ????????????,??????????? ?????????? ????????????????? ????? ???????????????????? Slide 83: P2P Network Linux NAT TCP/IP Bluetooth HTTP Firewall TCP/IP TCP/IP Application XP P2P??????? P2P ????? : P2P ????? P2P???????????????????????? Source: www.internet2.edu, July ‘04 Source: Eurpoean Tier I ISP Feb ‘04 BT HTTP eDonkey Internet2 traffic statistics Eurpoean traffic by Protocol ????P2P???????? : ????P2P???????? ??? P2P ?? : Deflection capabilities Responsiveness ??????????????? Lift Capabilities Drag Capabilities Responsiveness Thrust performance Reverse Thrust performance Responsiveness Fuel Consumption Braking performance Steering capabilities Traction Dampening capabilities Crew Capabilities - accuracy - perception - stamina - re-action times - SOP’s ???? ???? ???? ??????? ?????? ??? P2P ?? Folding@home/?????????? : Folding@home/?????????? ??????? peer-to-peer technology ??????????? ?????????????????????? ????????? http://www.stanford.edu/group/pandegroup/Cosm/ http://members.ud.com/vypc/cancer/ 1.2 P2P??? : 1.2 P2P??? Intel ???:????????????????????????????? A.Weytsel:????????????????? R.l.Granham: ??3??????? ?????????????? ?????DNS????? ???????????? C.Shirky: ??????????/CPU/??/????????? ?????????????????????????IP?????,P2P???????DNS???? ?????????? Slide 89: Kindberg:???????? D.J.Milojicic:??????????????? ???????????,????????? Napster:??????????,????????? ????????????????????,?????????? ?????????: ???????C/S?? ?P2P:????????,????????? ???????? ???????:?UUCP????? ???? ??????????????????? ???,?????… 1.3 P2P ? C/S : 1.3 P2P ? C/S ?????????????? ????????????(?????)???(?????)???(DNS)???(IP) ??????? ????????(Internet / Intranet)??? ???????????:eBusiness eServuices … Slide 91: ???--------------??? ??----------------------Ad-hoc ??-------------------------?? ??---------------------------Mesh ??----------------------------?? ?????------------------------???? ?IP???--------------------??IP??? ??DNS-------------------???? RPC------------------?? .NET JXTA C/S?? P2P?? CORBA CORBA Gnutella Napster eBusiness Web apps eServices Distr.apps Ad-hoc NW Clusters Internet Intranet WANs Grids P2P?C/S P2P ???? : P2P ???? ?????????????????:???????:?SETI@home?????????? ?????????:?Napster???????/?????? ???????????????? ???->??PC ->???->????(??) ??????????? P2P????:?JXTA,.NET ???P2P??:?Gnutella,FreeNet P2P???:?????? : P2P???:?????? ??/????:Napster ??????,SETI@home?????? ??????/???:????????????????????? ?????????? ???? ??/??:??????????????????ISP????????? ???;??????????? ??Ad-hoc?????,???????? Slide 94: P2P???? 2. P2P?? : 2. P2P?? ???????????????????? ??????????C/S?P2P?? C/S?????? ??:??????????????(??????)??,??????? ??:??????,????????????????:?DNS???????? Slide 96: ?P2P??:?Gnutella ? Freenet ??P2P??:????????????????,???????????????,????????,??P2P??????????,?????: Napster,Groove , Aimster , Magi , Softwax ,iMesh ?????????5Q…;Anysee ???SuperPeers?????:?Kazaa,??Peers????Peers?????,????????????????Peers ??P2P??????? P2P????? : P2P????? SETI@home Avbaki, Entropia Napster Gnutella Freenet Publius Free Haven Magi Groove Jabber JXTA .NET .NETMyServices P2P ???? : P2P ???? P2P ???? : P2P ???? ????P2P?? : ????P2P?? ?????:??????????????????????????????? ?????:???????????????????????????????????? ??????????????????:??????? SETI@home,????,????,???????,?????? ?????:????????P2P?? ?????????????? ?Workflow , JavaBean, Web Services ??????? : ??????? ???? ???? ????(???????Peers) ????:???? 2001?:Napster?Gnutella?Peers??????? ??????????:????????????,??DB ??????????? ?? : ?? ???????? ???????? ???????????????? ???? ????:Yahoo!?AOL?Jabber??????????????? ????:Buzzpad,???Power Point??????????????? P2P??:NetZ 1.0 ,Scour Exchange,Cybiko???????Peer?????,????????Peer?,???????? P2P ???? : P2P ???? P2P?? ?Internet?Intranet?Ad-hoc??? ???????????P2P ??????????????????????????(?????) ????? ??P2P?????????????,Napster,Gnutella Aimster ???????????,SETI@home Ad-hoc????????,??????,?Endeavors, Technologies Magi? ??:????? ????????????IDC?????????NGI/Inernet2 ??P2P????? 2.3 P2P ???? : 2.3 P2P ???? Slide 105: ???? ??:???????,????,email ??? ??:Napster Gnutella ??:??????? ???? ????:????????IT????(B2B) ????:Data Synapse/Information Architects WorldStreet ???? ???? ?????? ?? CenterSpan,AIM,Scour???????????????P2P?? P2P ??? P2P?? : P2P ??? P2P?? 3 ????? : 3 ????? P2P????:???????(?????) 3.1 ?????? : 3.1 ?????? ?? P2P??????????? ??????????????????? ????????PDA ???????????Ad-hoc????????? P2P?????????:????????????? ??(??)???(???????)?P2P????????? ???????????????P2P???????? ??? ??? : ??? ?????? ????????Peers :Napster:???????Peers,Gnutella:???????,?????????? ???Peers????? ??????????? ???????????????Peers?????? ????????????????? ???????: ??Peer???????????????? ????Napster Gnutella??????????? ??? : ??? ???? ??????????? ??????? P2P???????????????????? ????????????????????????:????????????? ??:???????????????????,????????? ????????????????,????P2P????? ???? : ???? P2P????Peers?????????????????? ?????? ???????????????,????????????????????? ???????:???Peer?????????CPU????,??,????????? ??? : ??? P2P???????? ????????????????? ????:?? ???????,????????,?????????????? ???????????Peers? ???????,????Peers?????DB ??????????????????? ??? : ??? ???? ?????????????P2P?? ??????????P2P?????????? ??? ??:?????????????(???????Peers) ???:??????????,??????Peers????,??????????????? ??:?????,??Peers???????? ??:????P2P??????? ???? : ???? ????? ???????? ??????,?????P2P???????? ??? ?????(??????????) ???????(??MP3????) ?????????????????,???????????? 3.2 ????? : 3.2 ????? ?????? ???,Napster?? ???Peers???????????????????,??????? ?????????Peers??? ??????????(?????:????????????) ????????:??????->????->????->??? ?Napster????,???????,?????????? Napster?? : Napster?? I have X! insert(X, 1.2.3.4) ... 1.2.3.4 Napster?? : Napster?? Where is file A? search(A) --> 4.3.2.1 4.3.2.1 ?????? : ?????? ?? ??Peer???????????Peers ?Peers???????Peers ??????? ????????(??5-9) ?? ???????? Gnutella ?????,????????? ??????????,?????????? ?? Kazaa ??Super-Peer????,??????? BT ???? Cache???? Gnutella?? : Gnutella?? Where is file A? KaZaA?? : KaZaA?? I have X! insert(X, 123.2.21.23) ... 123.2.21.23 KaZaA?? : KaZaA?? Where is file A? BitTorrent?? : BitTorrent?? Tracker A D C B BitTorrent?? : BitTorrent?? A C B D ?????? : ?????? ?? ????Peer??????ID,?????Peers????? ????????????,?????????Hash??ID ??Peer????ID?????? ???????,?????PeerID???Peer?ID ???????????????? ?Peer??????,?????????ID??Peer,????????????,??????????? 4????????? : 4????????? Chord/CAN/Tapestry/Pastry ???? ??????????P2P?? ????Peer????????? ???? ?????????Peer??????? ????????????? ???????? Slide 126: Chord ??Peer??LogN??Peer???(N??????Peer?) ?Peer??????,???????????LogN?Peers??? CAN ??Peer????LogN???Peers??? ??????????Peers??? ??????,???????? ????????? Tapestry?Pastry??? ??????,???????P2P????? ??? : ??? ????? id-????? next_hop-????id?????? file-??????id???? ???? ????id?????,????,???? ??????,??????????id,?????next_hop ???????????,????,?????????????id … ?????? : ?????? 4 n1 f4 12 n2 f12 5 n3 9 n3 f9 3 n1 f3 14 n4 f14 5 n3 14 n5 f14 13 n2 f13 3 n6 n1 n2 n3 n4 4 n1 f4 10 n5 f10 8 n6 n5 query(10) ??????????-small world,??????(Six Degrees of Separation)?? ??,????????????? Distributed Hash Table : Distributed Hash Table ??????????,????,?,????,??,???? ... CFS, OceanStore, PAST, ChordDNS Slide 130: ??????? ??:???,????“bootstrap”??,?????????,??????id ??:???????????????id????? ??:??????????????id,??????????????? ??:???? ???????????,??????????? ??????????:??x???,????x?? DHT??-Chord:?????(?)??????????????id ???[0...2m]??? ??????IP???hash Chord:?? : Chord:?? N32 N90 N105 K80 K20 K5 Circular ID space Key 5 Node 105 Chord:?? : Chord:?? N32 N90 N105 N60 N10 N120 K80 “Where is key 80?” “N90 has K80” 4 P2P?????? : 4 P2P?????? 4.1 ????:?? C/S ?? ??? ????????????? ???????:??/??/???? ?????????????,????????????????,??????????,?????????? ????:??????? ????????,????????? ??Peer???????? ?????(??????,?????Peers????) ?????????????? Slide 134: ?????????(Gnutella Freenet) ????????? ??????????? ??????????Peers?IP?? ???????????????Peer????????? ???????Peers?Cache???IP????? ??P2P??????????? 4.2 ???? : 4.2 ???? ??????????? ????????????:?????? ???????? ?????????? ??????????? P2P???????? Napster??????????? 600? ?SETI@hone2002???? ???350?.???????????????,???????????????????????????,?????? Avaki???????????????????? Slide 136: Napster???????????????????-???????????????????? Gnutella?Freenet:???P2P????Ad-hoc???,Peer??????????????Peers,??????????? CAN,Chord,Oceanstore PST:???P2P?? ??????????????????? ????????????????????,???????? ????????? ?10???,???????1014??? ??:???????????,P2P????????????????????,?????????,???????,??????? 4.3 ?? : 4.3 ?? ?? ??????????????????????????????? ????????????????????? ???? ??:?????????????? ???:???????????????? ??:?????????????????? ???:????????????????? ??:???????????????? ??:????????????????????? Slide 138: ????????????3???,????????(????????) ?????:????????? ?????:????????? ????:?????????????,?????????Peers????? ???? ???? ????:????????????????,? ???????????????????????? ???? ???? 6?????-???????? : 6?????-???????? ???????? ???????- UDP????? ?????-?????????? ????-???????? ?????-??????????????? ?????-??????????(Hosting)??? 4.4 ??? : 4.4 ??? ?? ????????,?????????(??/??)???????,????????,??????????????? P2P????? ????:???/???/????????????,?????????????? ???? (resilience??):??????????,???????????/??? ???????:????????????????????,?????Peers??????????? ?????:?????????/?????????????????,??????Peers??? Slide 142: ?????????????????? OceanStore ?????????????????? ??Peers??????????????,???????????????? Pastry ????????????/???????? ????????????log16N????? ????;??????,???? FastTrack ?????????????????? ????????????????????Hubs ?????????????,????????,??? ????????????????? 4.5 ????? : 4.5 ????? P2P??? ????? ????????????/??/???????? SETI@home ??????????????,????????1% Napster ?????????????????????????????,?????????. P2P??/??/?? ????????????????????????? ???????????????—????:????????????802.11??,??????????????????? 4.6 Ad-hoc?? : 4.6 Ad-hoc?? ??????? ????????/??????? ???????????/??????/???? Ad-hoc?? ?P2P??,?????,????P2P?? ?P2P??????,?????????????,???Ad-hoc??? ?P2P??, ???????????????,Ad-hoc??????????,?????????????????? 802.11b,???????Ad-hoc,?????, ???P2P,????????????? 4.7 ?? : 4.7 ?? P2P????: ????????????(Napster/Gnutella)?????(SETI@home) ???????? ????????????? ??/??/?? ???????????????? ??????(Napster SETI@home) Peers??????????????? ??P2P???????? ???????(Gnutella Freenet) ?????????????? ?????????????,????Perrs????, ????????? : ????????? ??(Replication) ???/?????????Peers??,??????? ????????????????? OceanStore??????????????????? ??(Cache) ??????/???????,??Peers?????? ????????-Peers????????????? Freenet:??????????????????? ????????,????????,??????? ????????? ??“???”??,60??, ????6?????? ??????,?????????-???? OceanStore/Pastry????????????? 4.8 ?? : 4.8 ?? ?????????????P2P???? Peers??????????/????????/??/????/?? P2P???????? ????? ?? ?????? ????? ??? ????? : ????? Publius ????/???,??????? ??????/????,??Peers???Peers??? Byzantine attacks ????????????? ?????????????????,????????????????? ?? : ??:????????????,?????? P2P?????????Peers??? ???????????Peers? ?????Peers????? ??Peers?????? ???????????,??????????????? ?????????????,?????:Sandbox,????(Java),???(Internet C++, POSIX???,??Linux),???????????? ???????????????? ?????:???????????? ?? ?????? : ?????? P2P?????? ???????? ????????????? ???? ??????????? ??????,???????? ??:???? ? ???? RIAA ????????????????????,??MP3???? ????? : ????? ??:???????????????????? P2P????? ???????,????Peer?????“??”?“???”??? ?????????????,????????Freeloader????????,???? ????????,??????? ???????Cross-ratings ?????????????? ??? : ??? P2P??????Peers??? ??????????????? ?FW?????TCP??,??FW????????? ???:??????????IP?NAT??????????????? ?FW?TCP80????,????????????? ????FW?Peers??????,??????????????? 4.9 ??????? : 4.9 ??????? P2P??? ?????????? ???:??????????????????? P2P?????? ??????????????? Web????????? P2P?????????? TCP????,??????????,????? ??????????????????,IPV4????????????????,?SLIP/PPP/VPN/FW/ DHCP/NAT/??DNS/ ??P2P????????????? Slide 154: ??????,???Peers????????;P2P?????????? ????? ????(??),PDA/??????,????Internet/intranet/ VPN ?????? ??????? ????????????????? ?????????????? P2P??????? ??????,??Web??(?????????) ????P2P??,???P2P??(Groove .NET) ???????P2P??(??????Napster) 4.10 ????? : 4.10 ????? P2P?????????????? ??????P2P????,?????????????????????:??????????????(?????????????) Genome@home????Peers???????,???Peers????????,??????;??Peers???,????????????? P2P???????Best effort????? ???????-??????? ??,?????(?????????????),??????? Napster/Guntella?????????? ?????????????P2P????? 4.11 ???? : 4.11 ???? ????,?? ???????? ????,????:Sockets,Message or HTTP ?????????,???????,????????? ???????????????,?????????????????????? ????????????QOS???? P2P????Ad-hoc?Grid????? JXTA????????????? 5 P2P???? : 5 P2P???? Analysis and compare 8 P2P Systems 6 P2P??????? : 6 P2P??????? ?????????? ???? ?????? P2P?? ?? ??Web????? ????? ??/??/?? ???? : ???? ??????????????——overlay networks ?????????Internet??????? Internet??????????????????? ????ALN Multicast (Application-Level). File storage and search ?? ??????? at scale ?????? : ?????? ????? : ????? ????? ??Peer??????????,??????????Peers???? Gnutella????,???? ???????? ??????????????P2P??,?????????????? ???????,???????,???????P2P??,Napster??????????? ?? ???????????;????????Peer,???????????? ????:??,?????? P2P??? : P2P??? P2P?????? ????? ???????? ?????? P2P??????? ?????????????????????????(?????) ???????????,??Ad-hoc????? ??????????P2P?????? Slide 168: ???? ???????????????????????? ???????????????,??????????,????????????,?? ???????,?????????? ??????????? ?????????? ???? P2P???????????,??????? ???????,??????????? ???????? : P2P?????????? P2P????????50-60%??(??),???90% P2P???????????? ?????????P2P? ?????????????? ??????P2P??? ????? P2P?IPV6????? ???????? Slide 170: ????8??(???) ???? ???? ???? ???? ???? ???? ???? ???? ????3????????? P2P??:????????;???????????????;??P2P???????????????? P2P??:??????,?Napster P2P??:??????JXTA You do not have the permission to view this presentation. In order to view it, please contact the author of the presentation.
ch23 nat vpn firewall ids p2p aSGuest16484 Download Post to : URL : Related Presentations : Share Add to Flag Embed Email Send to Blogs and Networks Add to Channel Uploaded from authorPOINT lite Insert YouTube videos in PowerPont slides with aS Desktop Copy embed code: (To copy code, click on the text box) Embed: URL: Thumbnail: WordPress Embed Customize Embed The presentation is successfully added In Your Favorites. Views: 94 Category: Entertainment License: All Rights Reserved Like it (0) Dislike it (0) Added: April 10, 2009 This Presentation is Public Favorites: 0 Presentation Description No description available. Comments Posting comment... Premium member Presentation Transcript ?23? ?????? : 23.1 ????? 23.2 NAT( Network Address Translation ) 23.3 ????? 23.4 VPN?? 23.5 ?????? 23.6 P2P????? ?23? ?????? 23.1 ?????????? : 23.1 ?????????? ???????(Proxy)????????: ??????????Internet,???????????????IP??? ?????????Internet?????????????? ?????????????????????? ?????????Internet???????????? ???????????? 23.1.1 ????????(1) : 23.1.1 ????????(1) 1?Proxy????? ?????????????????????:?????????????;?????????Internet?????????????????????????????????????????????????“?????”?“????”? 2? Proxy????? ??????????????????,??????Internet???,????/??????????????????????Internet????????????Internet??,??,?????????????????,????????????,???????? 23.1.1 ????????(2) : 3??????????? Proxy????????Socket????????????(????)??Proxy??Socket????,Proxy????????????????????????Socket???????,??????????,Proxy??Socket?????????????????????????,Proxy????????????????,????Socket????????,??????? 23.1.1 ????????(2) ?????????? : ?????????? 23.1.2 ???????? : 23.1.2 ???????? ????????????Internet?????,????????: 1?????IP?? 2???????????????? 3????????????????? 4???????????????? 5?????????? 6??????? 23.1.3 ????????? : 23.1.3 ????????? ???????????,???????,???????WWW???FTP?????Telnet?????Email???????TCP/UDP???Socks???????????????Internet????????????????????????????WinGate?WinRoute?SyGate????????? DIY: ?SyGate?????? : DIY: ?SyGate?????? SyGate???????????,????????,?Office????????????????????,??????Home??,????????,????????? SyGate?? ??SyGate ??SyGate??? ??SyGate??? SyGate?? : SyGate?? SyGate??????,??Modem,??Internet??,????????????PC???Internet?,????????????????????????????????,????????? ??SyGate???????????????????????????????????????????????????(?????10?????),???????????????????????,????????????????????????,??????????????????,??????? ??SyGate : ??SyGate ??SyGate??? : ??SyGate??? ??SyGate??????,??“??”???????????????????,????“??”??,??SyGate?????? ??“??????”??“????”,????????????,??“NVIDIA”??,??????“??????”,??????,???“??????”,???“??Internet/ISP??”???????,“???”?????????? ??????“??????DHCP”,??????????IP,??“??DNS??”,????????????? IP?????????IP?????????,???????????IP????? ??SyGate??? : ??SyGate??? ??SyGate??? : ??SyGate??? ???????????,?????SyGate?????,??????IP??,????SyGate???????????SyGate??????DHCP??,IP?????????????????,IP??????????IP???????,???DNS??????????IP??? ??SyGate??????????????????,??:?????????SyGate????????????????,?????????“?????”?????????SyGate????????TCP/IP,?????????? ??????? : ??????? ??????:??????????,??????????????????: (1)?????,????????????,????????? (2)?????,????????????,?????????? (3)????,???????????,??????? 23.2 NAT( Network Address Translation ) : 23.2 NAT( Network Address Translation ) ?RFC1597?????????(????,Private Internet,Intranet) ???IP???IANA???????????: 10.0.0.0 - 10.255.255.255 A single Class A network 172.16 .0.0- 172.31 .255.255 16 contiguous Class B networks 192.168.0.0 - 192.168.255 .255 256 contiguous Class C networks NAT??(RFC 1631) : NAT??(RFC 1631) NAT????????(??)???????????????? NAT???????????(???????): ???????(Source NAT,???SNAT),?IP??(masquerade) ????????(Destination NAT,???DNAT)? ????(???????????): ??NAT(static NAT)-???? ??NAT(Dynamic NAT)-??? ??(Overloading)-??? ?? SNAT ??IP??????? ????????????IP?? DNAT ???? NAT???? : NAT???? ?????,???????IP???????????: 192.168.32.10 ????? 213.18.123.110. ??????,?????IP?????IP???????: 192.168.32.10 ?????213.18.123.100 to 213.18.123.150. ?????????IP?? ??(Overloading)????????,?????IP????????????IP?????? Outgoing Web Client Through NAT : Internet 10.0.0.1 10.0.0.4 10.0.0.3 10.0.0.2 Web server a b c NAT 204.1.1.10 Connection request to port 80 from ‘c‘ to <web server> source 10.0.0.4, port 1025. 10.0.0.4, port 1025 mapped to 204.1.1.10, port 2000 Connection request from ‘c’ forwarded to <web server> source 204.1.1.10, port 2000. Request received and accepted. Outgoing Web Client Through NAT Outgoing Web Client Through NAT : Internet 10.0.0.1 10.0.0.4 10.0.0.3 10.0.0.2 Web server a b c NAT Response sent to 204.1.1.10, port 2000. Outgoing Web Client Through NAT Translate 204.1.1.10, port 2000 to 10.0.0.4 port 1025 Slide 20: Internet Router 24.88.48.47 with NAT that Masquerades Host 192.168.0.10 Web Client 192.168.0.20 Host 192.168.0.30 Host 192.168.0.40 Web Server port 80 FTP Server port 21 Web Server 130.27.8.35 To 130.27.8.35:80 from 192.168.0.20:Y To 130.27.8.35:80 from 24.88.48.47:x To 24.88.48.47:x from 130.27.8.35:80 To 192.168.0.20:Y from 130.27.8.35:80 23.3 ????? : 23.3 ????? ?????? ????????????????????????????????????,????????????????????????????????????????????????,???????????? Firewall ???????? : ???????? ??????????????????? ???????????????????? ????????? ????????????? : ????????????? ???????????(IDS) ?????? IPSec VPN?? ???? ??????? : ??????? ?????????????? ???????? ???????????????? ?????? : ???? ?? ???? ???? ???? ????:?????URL???HTTP?? ????????? ?????? ???????? : ???????? ??????? ??????? ????????? ???????? ?????? ??????? : ??????? ???(Packet Filtering)??????????????? ????????????????,????????(Access Control Table) ?????????????????????????????????????,???????????????????? ?????????? ? ?????? : ?????? ???????: ????? ????:???????????????? ????:??????????? ??????? IP???????? ??(TCP?UDP?ICMP?) TCP/UDP?????? TCP???ACK? ICMP???? ?????? : ?????? ?????:??10.1.1.1???????????????,??TCP???????????? ?????:?????20??????10.1.1.1?????,??TCP??????????? ?????:?????20??????10.1.1.1??1024???,????TCP???????????? ?????? : ?????? ??????? ??????????? ??????????? ?????????? Slide 31: IP????? ???????? Internet ??? ??? ??? Internet R ??? ??? ??? Slide 32: ??????: ???????????????? ?????????,??????????? ??????????? ??????: ??????????? ??????????????? ??????????? ??????? : ??????? ?????????: ??????????????????????,??????????? ????????????? ?????????TCP???????TCP???????? ?????????????????????????????? ????????? : ????????? ?????(Application Level Gateways)?????????????????????????????????????????????,???????,?????????????????,????? ???????????????????,???????????????????????????????,??????????????????,???????????????????????????????,?????????????? Slide 35: ?????(Application Level Gateway) ??????????????????????,???????????????? Internet ?????? HTTP ?? : HTTP ?? ??? ??????? ???? ??????,?????? ?????? ???????? ????Contents Contents(Java Applet, JavaScript, ActiveX) ????????? : ????????? ?????? ??????? ?????? ???????? : ???????? ????(Proxy Service)????????TCP??(Circuit Level Gateways or TCP Tunnels),?????????????????????????????????????????????,?????????????????????????????????????" ??",????????????" ??"???,???????????????????,????????????????????? ??,?????????????????????,????,??????????????????????,???????? Slide 39: ????????(Proxy Server) ??????????????? ????????TCP??,??????????,??????????? Internet R ??? ????? ??? ?????? : ?????? ???????????:?????,????????????Internet??,??????????????,??????????????????????,??????Internet??????????????,????????????????????? ???????????:??????????,???????,??????????????????,??????Internet?????????????????????,???????????????????????????? ??????????? : ??????????? ???? : ???? ?????????????????????? ???????????????? ????????????????? ????????,?TELNET?FTP? ???????????,??????????????? Slide 43: ??????????? ???????????????(DMZ)?????,???????????????? Internet R ????? ??? ????? ??? R ???? ???DMZ ???????????(?) : ???????????(?) ??????????????????????DMZ???????????DMZ????????????????????????????,???????????,???????????????????????internet????????????DMZ???????????????,???????????????(????????????????)????????? DIY1 ??windows 2000 server??“???” : DIY1 ??windows 2000 server??“???” windows 2000???3??????: ????“tcp/ip??”???????,???windows nt 4.0?????????; ????????????(rras)???, ?????????windows 2000 server?; ??????ipsec???????,ipsec??windows 2000 server????????? ?????? 23.4 VPN?? : 23.4 VPN?? ??????(VPN:Virtual Private Network) ????????????????????????????????Internet?????????????????????,??????????????????? : ??????,?????????????????????????????,?????????????????? ???????????????????????????? ????,?????????????????,????Internet???????????,???????????????????????? IETF??????IP?VPN?:"??IP?????????????“ IPSec VPN????IPSec???Internet????VPN Tunneling through the Internet : Tunneling through the Internet ?VPN??? : ?VPN??? ???? VPN??????????????????????? ????(QoS)?? ???????????????,?????????,????????????QoS?? ???????? ????????,??????????? ???? ??????? ??VPN??????? : ??VPN??????? VPN?????????????,??????? ?????(Tunneling) ?????(Encryption & Decryption) ??????(Key Management) ????(Authentication) VPN?? : VPN?? ????? ??????????VPN IPSec VPN MPLS VPN SSL VPN ????? ????? LAN??? VPN : VPN Two main kinds Applications LAN -to- LAN VPN(LAN?VPN) Firewall-To-Laptop VPN(?????VPN) http://users.vnet.net/ids/vpn/topology.htm ?????VPN : ?????VPN LAN?VPN : LAN?VPN 23.5 ?????? : 23.5 ?????? ??????IDS(Intrusion Detection System)?????????????,?????????????????????????????? ??????????? : ??????????? ?????????????????????,?????????????????????????????????????????????????????????????,??????????????????????“??”???,??????????????????????? ?? : ?? ??????????????,????????????????,?????????? 1?????????? 2?????????? 3?????????????????? 4?????????? ?????????????? : ?????????????? ?????????????,?????????????:???????????????????????? 1????????????:?????????????????????????????????????:??????????????????????????????,????????????????????????????????,??????????????,???????????????? 2????????????:?????????????????,????????????????,??????? ??????? : ??????? ???????????????: 1???????????? 2???????????? 3???????????? ????????:????????????????????????? ?????? : ?????? ???????????????,?????????,????????????????????????????????(??,??????)? ???????????????????:????????????????,??????????????? ??????? : ??????? ??????????????????????????????????,???????????,??????????????????????? ?????????,???????????????????????????????????????????????????????????????????????,??????????,??????????????????????????,?????????????????????,???????????????????,????????????,??????????????????????????? ????????? : ????????? ?????????????????????????????????????????????????????????????????,???????????? ????????????????:?????????????????????????????,??????????????????????????????,??????????????????????????????????,????????????????,?????????????????? DIY: ???????????? : DIY: ???????????? ???????????????????,??????????????,????????,????????????? ??????TCPView????????????????,????????? ??????? : ??????? ???????????????????????,?????????,????????,????????????????????????????: ????????????? ???? : ???? ??????????????,??????????????????????????????????? ????????????????????????????????,?????????????????????,????????????????,???????????????????,??????????????????????????????????? ???? : ???? ????(Analysis Schemes)??????????,??????????????????????????????????????????????????????????? ???? : ???? 0 0050 dac6 f2d6 00b0 d04d cbaa 0800 4500 .P.......M....E. 10 0157 3105 4000 8006 0000 0a0a 0231 d850 .W1.@........1.P 20 1111 06a3 0050 df62 322e 413a 9cf1 5018 .....P.b2.A:..P. 30 16d0 f6e5 0000 4745 5420 2f70 726f 6475 ......GET /produ 40 6374 732f 7769 7265 6c65 7373 2f69 6d61 cts/wireless/ima 50 6765 732f 686f 6d65 5f63 6f6c 6c61 6765 ges/home_collage 60 322e 6a70 6720 4854 5450 2f31 2e31 0d0a 2.jpg HTTP/1.1.. 70 4163 6365 7074 3a20 2a2f 2a0d 0a52 6566 Accept: */*..Ref 80 6572 6572 3a20 6874 7470 3a2f 2f77 7777 erer: http://www 90 2e61 6d65 7269 7465 6368 2e63 6f6d 2f70 .ameritech.com/p a0 726f 6475 6374 732f 7769 7265 6c65 7373 roducts/wireless b0 2f73 746f 7265 2f0d 0a41 6363 6570 742d /store/..Accept- c0 4c61 6e67 7561 6765 3a20 656e 2d75 730d Language: en-us. d0 0a41 6363 6570 742d 456e 636f 6469 6e67 .Accept-Encoding e0 3a20 677a 6970 2c20 6465 666c 6174 650d : gzip, deflate. f0 0a55 7365 722d 4167 656e 743a 204d 6f7a .User-Agent: Moz 100 696c 6c61 2f34 2e30 2028 636f 6d70 6174 illa/4.0 (compat 110 6962 6c65 3b20 4d53 4945 2035 2e30 313b ible; MSIE 5.01; 120 2057 696e 646f 7773 204e 5420 352e 3029 Windows NT 5.0) 130 0d0a 486f 7374 3a20 7777 772e 616d 6572 ..Host: www.amer 140 6974 6563 682e 636f 6d0d 0a43 6f6e 6e65 itech.com..Conne 150 6374 696f 6e3a 204b 6565 702d 416c 6976 ction: Keep-Aliv 160 650d 0a0d 0a e.... ???? : ???? 0 0050 dac6 f2d6 00b0 d04d cbaa 0800 4500 .P.......M....E. 10 0157 3105 4000 8006 0000 0a0a 0231 d850 .W1.@........1.P 20 1111 06a3 0050 df62 322e 413a 9cf1 5018 .....P.b2.A:..P. 30 16d0 f6e5 0000 4745 5420 2f70 726f 6475 ......GET /produ 40 6374 732f 7769 7265 6c65 7373 2f69 6d61 cts/wireless/ima 50 6765 732f 686f 6d65 5f63 6f6c 6c61 6765 ges/home_collage 60 322e 6a70 6720 4854 5450 2f31 2e31 0d0a 2.jpg HTTP/1.1.. 70 4163 6365 7074 3a20 2a2f 2a0d 0a52 6566 Accept: */*..Ref 80 6572 6572 3a20 6874 7470 3a2f 2f77 7777 erer: http://www 90 2e61 6d65 7269 7465 6368 2e63 6f6d 2f70 .ameritech.com/p a0 726f 6475 6374 732f 7769 7265 6c65 7373 roducts/wireless b0 2f73 746f 7265 2f0d 0a41 6363 6570 742d /store/..Accept- c0 4c61 6e67 7561 6765 3a20 656e 2d75 730d Language: en-us. d0 0a41 6363 6570 742d 456e 636f 6469 6e67 .Accept-Encoding e0 3a20 677a 6970 2c20 6465 666c 6174 650d : gzip, deflate. f0 0a55 7365 722d 4167 656e 743a 204d 6f7a .User-Agent: Moz 100 696c 6c61 2f34 2e30 2028 636f 6d70 6174 illa/4.0 (compat 110 6962 6c65 3b20 4d53 4945 2035 2e30 313b ible; MSIE 5.01; 120 2057 696e 646f 7773 204e 5420 352e 3029 Windows NT 5.0) 130 0d0a 486f 7374 3a20 7777 772e 616d 6572 ..Host: www.amer 140 6974 6563 682e 636f 6d0d 0a43 6f6e 6e65 itech.com..Conne 150 6374 696f 6e3a 204b 6565 702d 416c 6976 ction: Keep-Aliv 160 650d 0a0d 0a e.... NIDS??? : NIDS??? NIDS????????????? ????HUB ???? ???? ??? ????? Sensor Console ???? : ???? HUB IDS Sensor Monitored Servers Console ???? : ???? Switch IDS Sensor Monitored Servers Console ???????? (SPAN / Port Monitor) ???? : ???? Switch IDS Sensor Monitored Servers ??IP ???? : ???? IDS Sensors L4?L7 ???? ?? : ?? ???????????,??????????????????????????????????????????????????? 1??????????????,????????? 2?????:????????????????????,?????????????????? 3??????????????,????????????????,?????????? DIY: ??????:Snort : DIY: ??????:Snort Snort?????????????????????????????????IP ????????,????????,???????/?????????????????,?????????? Snort ?????*nix/Win32 ???? Snort??????????????? ????? : ????? ???????????? WinPcap_4_0.exe--http://winpcap.polito.it/--??????????? snort-2_0_0.exe--http://www.snort.org--Windows ???Snort ??? Slide 77: ?C:\Snort\rules????????snort.conf??,????: include C:\Snort\rules\1.rules ?C:\Snort\rules????????1.rules??,????: alert tcp any any -> 59.69.149.130 21 (content: "test"; msg: "FTP root login";sid:1;) Slide 78: ??snort ??????:c:\snort\bin>snort -c "c:\snort\etc\snort.conf" -l "c:\snort\logs" -d -e -X-X ????????????raw packet ??-d ??????????-e ????/??????????-c ??????snort ???????? 23.6 P2P????? : 23.6 P2P????? ?? ?? ????? ?????? P2P????? ????? 1.???P2P : 1.???P2P P2P:Peer-to-Peer ??(??,??)…;???… ???????????????????????????? ???????????(?????)????????(??????????) ???????????????/????,??????????? ????:??????ad-hoc?? ????????? : Sarnoff ’law:?????O(n):???????,?1???(??)???(n-1)???(??)? Metcalfe ’law:?????O(n2)????????,??1???????n-1???,????n(n-1)=n2-n???????? Reed ’law:?????O(2n):?????????????Cn2+Cn3+…Cnn-1+Cnn = 2n-n-1 ??? ????????? P2P??? : P2P??? ?????? ????????????,??????????? ?????????? ????????????????? ????? ???????????????????? Slide 83: P2P Network Linux NAT TCP/IP Bluetooth HTTP Firewall TCP/IP TCP/IP Application XP P2P??????? P2P ????? : P2P ????? P2P???????????????????????? Source: www.internet2.edu, July ‘04 Source: Eurpoean Tier I ISP Feb ‘04 BT HTTP eDonkey Internet2 traffic statistics Eurpoean traffic by Protocol ????P2P???????? : ????P2P???????? ??? P2P ?? : Deflection capabilities Responsiveness ??????????????? Lift Capabilities Drag Capabilities Responsiveness Thrust performance Reverse Thrust performance Responsiveness Fuel Consumption Braking performance Steering capabilities Traction Dampening capabilities Crew Capabilities - accuracy - perception - stamina - re-action times - SOP’s ???? ???? ???? ??????? ?????? ??? P2P ?? Folding@home/?????????? : Folding@home/?????????? ??????? peer-to-peer technology ??????????? ?????????????????????? ????????? http://www.stanford.edu/group/pandegroup/Cosm/ http://members.ud.com/vypc/cancer/ 1.2 P2P??? : 1.2 P2P??? Intel ???:????????????????????????????? A.Weytsel:????????????????? R.l.Granham: ??3??????? ?????????????? ?????DNS????? ???????????? C.Shirky: ??????????/CPU/??/????????? ?????????????????????????IP?????,P2P???????DNS???? ?????????? Slide 89: Kindberg:???????? D.J.Milojicic:??????????????? ???????????,????????? Napster:??????????,????????? ????????????????????,?????????? ?????????: ???????C/S?? ?P2P:????????,????????? ???????? ???????:?UUCP????? ???? ??????????????????? ???,?????… 1.3 P2P ? C/S : 1.3 P2P ? C/S ?????????????? ????????????(?????)???(?????)???(DNS)???(IP) ??????? ????????(Internet / Intranet)??? ???????????:eBusiness eServuices … Slide 91: ???--------------??? ??----------------------Ad-hoc ??-------------------------?? ??---------------------------Mesh ??----------------------------?? ?????------------------------???? ?IP???--------------------??IP??? ??DNS-------------------???? RPC------------------?? .NET JXTA C/S?? P2P?? CORBA CORBA Gnutella Napster eBusiness Web apps eServices Distr.apps Ad-hoc NW Clusters Internet Intranet WANs Grids P2P?C/S P2P ???? : P2P ???? ?????????????????:???????:?SETI@home?????????? ?????????:?Napster???????/?????? ???????????????? ???->??PC ->???->????(??) ??????????? P2P????:?JXTA,.NET ???P2P??:?Gnutella,FreeNet P2P???:?????? : P2P???:?????? ??/????:Napster ??????,SETI@home?????? ??????/???:????????????????????? ?????????? ???? ??/??:??????????????????ISP????????? ???;??????????? ??Ad-hoc?????,???????? Slide 94: P2P???? 2. P2P?? : 2. P2P?? ???????????????????? ??????????C/S?P2P?? C/S?????? ??:??????????????(??????)??,??????? ??:??????,????????????????:?DNS???????? Slide 96: ?P2P??:?Gnutella ? Freenet ??P2P??:????????????????,???????????????,????????,??P2P??????????,?????: Napster,Groove , Aimster , Magi , Softwax ,iMesh ?????????5Q…;Anysee ???SuperPeers?????:?Kazaa,??Peers????Peers?????,????????????????Peers ??P2P??????? P2P????? : P2P????? SETI@home Avbaki, Entropia Napster Gnutella Freenet Publius Free Haven Magi Groove Jabber JXTA .NET .NETMyServices P2P ???? : P2P ???? P2P ???? : P2P ???? ????P2P?? : ????P2P?? ?????:??????????????????????????????? ?????:???????????????????????????????????? ??????????????????:??????? SETI@home,????,????,???????,?????? ?????:????????P2P?? ?????????????? ?Workflow , JavaBean, Web Services ??????? : ??????? ???? ???? ????(???????Peers) ????:???? 2001?:Napster?Gnutella?Peers??????? ??????????:????????????,??DB ??????????? ?? : ?? ???????? ???????? ???????????????? ???? ????:Yahoo!?AOL?Jabber??????????????? ????:Buzzpad,???Power Point??????????????? P2P??:NetZ 1.0 ,Scour Exchange,Cybiko???????Peer?????,????????Peer?,???????? P2P ???? : P2P ???? P2P?? ?Internet?Intranet?Ad-hoc??? ???????????P2P ??????????????????????????(?????) ????? ??P2P?????????????,Napster,Gnutella Aimster ???????????,SETI@home Ad-hoc????????,??????,?Endeavors, Technologies Magi? ??:????? ????????????IDC?????????NGI/Inernet2 ??P2P????? 2.3 P2P ???? : 2.3 P2P ???? Slide 105: ???? ??:???????,????,email ??? ??:Napster Gnutella ??:??????? ???? ????:????????IT????(B2B) ????:Data Synapse/Information Architects WorldStreet ???? ???? ?????? ?? CenterSpan,AIM,Scour???????????????P2P?? P2P ??? P2P?? : P2P ??? P2P?? 3 ????? : 3 ????? P2P????:???????(?????) 3.1 ?????? : 3.1 ?????? ?? P2P??????????? ??????????????????? ????????PDA ???????????Ad-hoc????????? P2P?????????:????????????? ??(??)???(???????)?P2P????????? ???????????????P2P???????? ??? ??? : ??? ?????? ????????Peers :Napster:???????Peers,Gnutella:???????,?????????? ???Peers????? ??????????? ???????????????Peers?????? ????????????????? ???????: ??Peer???????????????? ????Napster Gnutella??????????? ??? : ??? ???? ??????????? ??????? P2P???????????????????? ????????????????????????:????????????? ??:???????????????????,????????? ????????????????,????P2P????? ???? : ???? P2P????Peers?????????????????? ?????? ???????????????,????????????????????? ???????:???Peer?????????CPU????,??,????????? ??? : ??? P2P???????? ????????????????? ????:?? ???????,????????,?????????????? ???????????Peers? ???????,????Peers?????DB ??????????????????? ??? : ??? ???? ?????????????P2P?? ??????????P2P?????????? ??? ??:?????????????(???????Peers) ???:??????????,??????Peers????,??????????????? ??:?????,??Peers???????? ??:????P2P??????? ???? : ???? ????? ???????? ??????,?????P2P???????? ??? ?????(??????????) ???????(??MP3????) ?????????????????,???????????? 3.2 ????? : 3.2 ????? ?????? ???,Napster?? ???Peers???????????????????,??????? ?????????Peers??? ??????????(?????:????????????) ????????:??????->????->????->??? ?Napster????,???????,?????????? Napster?? : Napster?? I have X! insert(X, 1.2.3.4) ... 1.2.3.4 Napster?? : Napster?? Where is file A? search(A) --> 4.3.2.1 4.3.2.1 ?????? : ?????? ?? ??Peer???????????Peers ?Peers???????Peers ??????? ????????(??5-9) ?? ???????? Gnutella ?????,????????? ??????????,?????????? ?? Kazaa ??Super-Peer????,??????? BT ???? Cache???? Gnutella?? : Gnutella?? Where is file A? KaZaA?? : KaZaA?? I have X! insert(X, 123.2.21.23) ... 123.2.21.23 KaZaA?? : KaZaA?? Where is file A? BitTorrent?? : BitTorrent?? Tracker A D C B BitTorrent?? : BitTorrent?? A C B D ?????? : ?????? ?? ????Peer??????ID,?????Peers????? ????????????,?????????Hash??ID ??Peer????ID?????? ???????,?????PeerID???Peer?ID ???????????????? ?Peer??????,?????????ID??Peer,????????????,??????????? 4????????? : 4????????? Chord/CAN/Tapestry/Pastry ???? ??????????P2P?? ????Peer????????? ???? ?????????Peer??????? ????????????? ???????? Slide 126: Chord ??Peer??LogN??Peer???(N??????Peer?) ?Peer??????,???????????LogN?Peers??? CAN ??Peer????LogN???Peers??? ??????????Peers??? ??????,???????? ????????? Tapestry?Pastry??? ??????,???????P2P????? ??? : ??? ????? id-????? next_hop-????id?????? file-??????id???? ???? ????id?????,????,???? ??????,??????????id,?????next_hop ???????????,????,?????????????id … ?????? : ?????? 4 n1 f4 12 n2 f12 5 n3 9 n3 f9 3 n1 f3 14 n4 f14 5 n3 14 n5 f14 13 n2 f13 3 n6 n1 n2 n3 n4 4 n1 f4 10 n5 f10 8 n6 n5 query(10) ??????????-small world,??????(Six Degrees of Separation)?? ??,????????????? Distributed Hash Table : Distributed Hash Table ??????????,????,?,????,??,???? ... CFS, OceanStore, PAST, ChordDNS Slide 130: ??????? ??:???,????“bootstrap”??,?????????,??????id ??:???????????????id????? ??:??????????????id,??????????????? ??:???? ???????????,??????????? ??????????:??x???,????x?? DHT??-Chord:?????(?)??????????????id ???[0...2m]??? ??????IP???hash Chord:?? : Chord:?? N32 N90 N105 K80 K20 K5 Circular ID space Key 5 Node 105 Chord:?? : Chord:?? N32 N90 N105 N60 N10 N120 K80 “Where is key 80?” “N90 has K80” 4 P2P?????? : 4 P2P?????? 4.1 ????:?? C/S ?? ??? ????????????? ???????:??/??/???? ?????????????,????????????????,??????????,?????????? ????:??????? ????????,????????? ??Peer???????? ?????(??????,?????Peers????) ?????????????? Slide 134: ?????????(Gnutella Freenet) ????????? ??????????? ??????????Peers?IP?? ???????????????Peer????????? ???????Peers?Cache???IP????? ??P2P??????????? 4.2 ???? : 4.2 ???? ??????????? ????????????:?????? ???????? ?????????? ??????????? P2P???????? Napster??????????? 600? ?SETI@hone2002???? ???350?.???????????????,???????????????????????????,?????? Avaki???????????????????? Slide 136: Napster???????????????????-???????????????????? Gnutella?Freenet:???P2P????Ad-hoc???,Peer??????????????Peers,??????????? CAN,Chord,Oceanstore PST:???P2P?? ??????????????????? ????????????????????,???????? ????????? ?10???,???????1014??? ??:???????????,P2P????????????????????,?????????,???????,??????? 4.3 ?? : 4.3 ?? ?? ??????????????????????????????? ????????????????????? ???? ??:?????????????? ???:???????????????? ??:?????????????????? ???:????????????????? ??:???????????????? ??:????????????????????? Slide 138: ????????????3???,????????(????????) ?????:????????? ?????:????????? ????:?????????????,?????????Peers????? ???? ???? ????:????????????????,? ???????????????????????? ???? ???? 6?????-???????? : 6?????-???????? ???????? ???????- UDP????? ?????-?????????? ????-???????? ?????-??????????????? ?????-??????????(Hosting)??? 4.4 ??? : 4.4 ??? ?? ????????,?????????(??/??)???????,????????,??????????????? P2P????? ????:???/???/????????????,?????????????? ???? (resilience??):??????????,???????????/??? ???????:????????????????????,?????Peers??????????? ?????:?????????/?????????????????,??????Peers??? Slide 142: ?????????????????? OceanStore ?????????????????? ??Peers??????????????,???????????????? Pastry ????????????/???????? ????????????log16N????? ????;??????,???? FastTrack ?????????????????? ????????????????????Hubs ?????????????,????????,??? ????????????????? 4.5 ????? : 4.5 ????? P2P??? ????? ????????????/??/???????? SETI@home ??????????????,????????1% Napster ?????????????????????????????,?????????. P2P??/??/?? ????????????????????????? ???????????????—????:????????????802.11??,??????????????????? 4.6 Ad-hoc?? : 4.6 Ad-hoc?? ??????? ????????/??????? ???????????/??????/???? Ad-hoc?? ?P2P??,?????,????P2P?? ?P2P??????,?????????????,???Ad-hoc??? ?P2P??, ???????????????,Ad-hoc??????????,?????????????????? 802.11b,???????Ad-hoc,?????, ???P2P,????????????? 4.7 ?? : 4.7 ?? P2P????: ????????????(Napster/Gnutella)?????(SETI@home) ???????? ????????????? ??/??/?? ???????????????? ??????(Napster SETI@home) Peers??????????????? ??P2P???????? ???????(Gnutella Freenet) ?????????????? ?????????????,????Perrs????, ????????? : ????????? ??(Replication) ???/?????????Peers??,??????? ????????????????? OceanStore??????????????????? ??(Cache) ??????/???????,??Peers?????? ????????-Peers????????????? Freenet:??????????????????? ????????,????????,??????? ????????? ??“???”??,60??, ????6?????? ??????,?????????-???? OceanStore/Pastry????????????? 4.8 ?? : 4.8 ?? ?????????????P2P???? Peers??????????/????????/??/????/?? P2P???????? ????? ?? ?????? ????? ??? ????? : ????? Publius ????/???,??????? ??????/????,??Peers???Peers??? Byzantine attacks ????????????? ?????????????????,????????????????? ?? : ??:????????????,?????? P2P?????????Peers??? ???????????Peers? ?????Peers????? ??Peers?????? ???????????,??????????????? ?????????????,?????:Sandbox,????(Java),???(Internet C++, POSIX???,??Linux),???????????? ???????????????? ?????:???????????? ?? ?????? : ?????? P2P?????? ???????? ????????????? ???? ??????????? ??????,???????? ??:???? ? ???? RIAA ????????????????????,??MP3???? ????? : ????? ??:???????????????????? P2P????? ???????,????Peer?????“??”?“???”??? ?????????????,????????Freeloader????????,???? ????????,??????? ???????Cross-ratings ?????????????? ??? : ??? P2P??????Peers??? ??????????????? ?FW?????TCP??,??FW????????? ???:??????????IP?NAT??????????????? ?FW?TCP80????,????????????? ????FW?Peers??????,??????????????? 4.9 ??????? : 4.9 ??????? P2P??? ?????????? ???:??????????????????? P2P?????? ??????????????? Web????????? P2P?????????? TCP????,??????????,????? ??????????????????,IPV4????????????????,?SLIP/PPP/VPN/FW/ DHCP/NAT/??DNS/ ??P2P????????????? Slide 154: ??????,???Peers????????;P2P?????????? ????? ????(??),PDA/??????,????Internet/intranet/ VPN ?????? ??????? ????????????????? ?????????????? P2P??????? ??????,??Web??(?????????) ????P2P??,???P2P??(Groove .NET) ???????P2P??(??????Napster) 4.10 ????? : 4.10 ????? P2P?????????????? ??????P2P????,?????????????????????:??????????????(?????????????) Genome@home????Peers???????,???Peers????????,??????;??Peers???,????????????? P2P???????Best effort????? ???????-??????? ??,?????(?????????????),??????? Napster/Guntella?????????? ?????????????P2P????? 4.11 ???? : 4.11 ???? ????,?? ???????? ????,????:Sockets,Message or HTTP ?????????,???????,????????? ???????????????,?????????????????????? ????????????QOS???? P2P????Ad-hoc?Grid????? JXTA????????????? 5 P2P???? : 5 P2P???? Analysis and compare 8 P2P Systems 6 P2P??????? : 6 P2P??????? ?????????? ???? ?????? P2P?? ?? ??Web????? ????? ??/??/?? ???? : ???? ??????????????——overlay networks ?????????Internet??????? Internet??????????????????? ????ALN Multicast (Application-Level). File storage and search ?? ??????? at scale ?????? : ?????? ????? : ????? ????? ??Peer??????????,??????????Peers???? Gnutella????,???? ???????? ??????????????P2P??,?????????????? ???????,???????,???????P2P??,Napster??????????? ?? ???????????;????????Peer,???????????? ????:??,?????? P2P??? : P2P??? P2P?????? ????? ???????? ?????? P2P??????? ?????????????????????????(?????) ???????????,??Ad-hoc????? ??????????P2P?????? Slide 168: ???? ???????????????????????? ???????????????,??????????,????????????,?? ???????,?????????? ??????????? ?????????? ???? P2P???????????,??????? ???????,??????????? ???????? : P2P?????????? P2P????????50-60%??(??),???90% P2P???????????? ?????????P2P? ?????????????? ??????P2P??? ????? P2P?IPV6????? ???????? Slide 170: ????8??(???) ???? ???? ???? ???? ???? ???? ???? ???? ????3????????? P2P??:????????;???????????????;??P2P???????????????? P2P??:??????,?Napster P2P??:??????JXTA