高性能操作系统检测方法研究

随着网络技术的发展,网络信息系统逐渐深入到各行各业,网络安全成为人们关注的话题.入侵检测是一种用于检测计算机网络系统中入侵行为的网络信息安全技术,通常黑客们利用操作系统指纹识别工具检测计算机系统,并以此分析漏洞和各种安全隐患,大肆攻击入侵网络服务器与私人计算机.因此,本文全方位地介绍P0F及NMAP两种操作系统识别工具,深入研究分析他们的工作原理,通过对比分析P0F与NMAP的功能及性能,利用P0F的高性能、准确性,对P0F源代码进行研究修改,设计出高性能、高准确性的操作系统检测工具,以满足大数据环境下准确获取操作系统信息的需求.

Research on High-Performance Operating System Detection Method

Currently,network security and information security problems have become increasingly serious.Intrusion detection is a network of information security technology to detect computer network system for the intrusion,hackers generally use the operating system fingerprinting tools to detect computer system,and thus analyze vulnerabilities and security risks,attacking the network server and personal computer intrusion.Therefore,this article introduces comprehensively two operating system identification tools of P0F and NMAP,researches and analyses their works in depth through comparative analysis of the functions and performance of P0F and NMAP,uses P0F performance and accuracy to modify the source code of P0F,design high-performance,high-accuracy operating system detection tool,in order to satisfy the needs of accurate obtaining the operating system information in large data environments.