| 摘要: |
| 针对网络安全领域中网络地址转换器（NAT）规模被动估计这一问题，提出了一种新的NAT规模被动估计方法。在被动接收条件下，通过利用TCP数据包时间戳值与接收时间之间表现出的线性关系，将NAT规模估计转换为坐标图上的直线数目检测问题。然后基于Hough变换递归放大坐标图像来检测直线数目，从而估计出NAT规模大小。与已有算法相比，该方法不仅可以解决初始类别的选择问题，还能提高时间戳序列发生交叉或距离较近时的判断精度。实验测试结果表明，该方法可以准确地检测出线性关系的数目，进而估计出NAT规模大小，并且性能优于已有算法。 |
| 关键词: 网络安全；NAT规模估计 TCP时间戳 时间序列分析 线性关系估计 Hough变换 |
| DOI： |
|
| 基金项目: |
|
| A new passive NATted hosts counting method based on Hough transform |
| GUAN Tao,WANG Keren,XU Zhengguo |
| () |
| Abstract: |
| To solve the problem of NATted(Network Address Translator，NAT) hosts counting in network security,a new method based on Hough transform is proposed.By exploiting the linear relation between TCP timestamp and received time in the packets,the problem is transformed to counting lines in the coordinate graph.Hough transform is introduced to detect lines in the graph.To get more precise result,zooming in the graph iteratively is used in the algorithm.Compared with existing algorithms,the proposed method can solve the problem of choosing initial clusters,and improve the detection accuracy with intersected or short distance timestamp sequence.Experiment results show that the algorithm based on Hough transform can detect the number of NATted hosts precisely which outperforms existing methods. |
| Key words: network security NATted hosts counting TCP timestamp time series analysis linearity extraction Hough transforms |
《电讯技术》编辑部 