东北大学学报(自然科学版) ›› 2011, Vol. 32 ›› Issue (2): 197-201.DOI: -

• 论著 • 上一篇    下一篇

基于BGP的不良网站地址阻断系统

王和兴;王翠荣;于戈;   

  1. 东北大学信息科学与工程学院;
  • 收稿日期:2013-06-19 修回日期:2013-06-19 发布日期:2013-04-04
  • 通讯作者: -
  • 作者简介:-
  • 基金资助:
    国家自然科学基金资助项目(60273078,60874108)

On the BGP-based bad websites address blocking system

Wang, He-Xing (1); Wang, Cui-Rong (1); Yu, Ge (1)   

  1. (1) School of Information Science and Engineering, Northeastern University, Shenyang 110819, China
  • Received:2013-06-19 Revised:2013-06-19 Published:2013-04-04
  • Contact: Wang, H.-X.
  • About author:-
  • Supported by:
    -

摘要: 传统的防止不良网络信息泛滥的方法反应慢,手续复杂,针对这一问题,提出一种新的基于BGP协议的网络地址阻断方法.该方法建立不良网站地址分发系统,使用私有AS号码标志阻断点,利用多跳机制实现分发系统与阻断点间的会话连接,并通过阻断点的黑洞配置直接阻断对不良网站地址的访问.原型系统的初步部署表明:该系统可在秒级时间内对经过举报核实的不良网络地址实现全网分发,并快速实现对目标网站的阻断.该方法可在运营商网络中进行部署来有效阻止不良信息的泛滥.

关键词: 不良网站, 边界网关协议, 网络地址分发, 网络阻断点

Abstract: The conventional method to prevent the bad information from overflow in Internet is slow on response with complicated procedures. A new BGP-based network address blocking system was therefore proposed to solve the problem, where a bad websites address distribution system was setup with a private AS number used as the identifier of network blocking point. With the multi-hop mechanism, the session between the bad websites address distribution system and network blocking points was implementing, then the configuration of black hole at network blocking points blocked the access to bad websites address. The deployment of the prototype system showed that after the verification of a bad network address which has been accused, the distribution system will transmit the bad network address to all blocking points in seconds so as to block the target network address quickly. The blocking system can be deployed in carrier networks to effectively prevent the bad information from its diffusion.

中图分类号: