关于下一代网络NGN的设计与实现毕业论文.doc

摘　要 本文首先从NGN的定义、特点、网络架构、系统工作流程等几个方面做简单介绍。然后以互联网和传统电信网的安全需求为研究基础，对NGN的安全需求进行分析研究，指出NGN的安全需求是在互联网和传统电信网的安全需求基础上的进一步提升；通过NGN的可靠性与生存性、服务可控性、可用性、信息传递安全等方面来具体分析了NGN的安全问题。通过介绍传统网络的安全解决方案和这些传统解决方案在应对NGN的安全问题中所呈现出的局限性。针对NGN中出现的安全威胁，提出相对比较完整的NGN安全体系框架，并且提出了一些特别的防御措施、合法监听的原理和可行性、入侵检测的基本原理，主要包括面对的威胁、分类检测的方法及其关键技术。 本文运用比较全面的视角审视了NGN的安全问题。其中NGN安全体系是本文的创新点。该安全体系在充分考虑了NGN安全需求的前提下，提炼出传统网络的安全解决方案中的精髓，弥补NGN安全上存在的漏洞，解决NGN可能面临的安全威胁。本文同时提出了NGN安全防御的实现思路，重点提出了合法监听在NGN的安全解决方案中的重要性，阐述了合法监听的基本原理、可行性以及所面临的困难,为以后更深入的研究奠定了基础。 关键词： NGN，安全需求，安全威胁，安全体系，防火墙，加密，入侵检测，入侵防护，反病毒，合法监听 Abstract First of all, this paper simply introduced the next generation network (NGN), such as the definition, characteristics, network frames and so on. Then, this thesis try to analyze and research the safety issues which NGN may face and the solve plans comprehensively. It includes following aspects: NGN safe requests, safety challenge that NGN may face, solving plans of NGN safety based on the traditional plans, NGN safety system, NGN defend measures, NGNs legal monitor and so on.The security requirement and weakness are studied deeply based on that of Internet and PSTN network. It has been figured out that the security requirement of NGN is the combo of that of Internet and PSTN network. Through analyzing the reliability, existence, service controllability and so on, security problem of NGN has been a task deserving research.This paper has considered the security requirement to abstract the kernel of the security resolve scheme in the traditional network; make up the leak in NGN security; resolve the potential security problem. But, the traditional security solution is not enough to resolve all the NGN security problems. This paper set up a new security system for NGN to meet such special requirement, which is based on a mount of studies on security threats faced by NGN. At the same time, it is mentioned that some special recovery measure and it has been put forward that the realization way, especially the importance o