Upload
tuyenan
View
218
Download
0
Embed Size (px)
Citation preview
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
1/86
n tt nghip Nguyn Quc Bo T12-K46
LI CM N
n c hon thnh l nh s gip tn tnh ca cc thy c, cc
bn ng ni!n " nh#ng ngi th$n% &i ' ti!n () *in by t+ lng bi-t .n
-n t/t c0 nh#ng ngi 1 gip () t2ong 3' t2nh h4c tp " hon thnh
n t5t nghi6p ny%
7c bi6t () *in by t+ lng bi-t .n ch$n thnh nh/t t8i thy 9g'y:n
;ong ?n " gip () t2ong 3' t2nh
nghi!n c@' thc hi6n A ti%
B) *in ch$n thnh c0) .n nh#ng C Di-n Eng gEp h-t s@c 3'C b' ca
thy gio ph0n bi6n%
9h$n >Fp ny cho () by t+ lng bi-t .n s$' sGc -n cc thy c t2ong
Dhoa i6n HIJKi:n Hhng t2ng i ;4c Lch Mhoa ; 9Ni t2ong s'5t
nh#ng nO) h4c 3'a 1 c'ng c/p cho () 2/t nhiA' nh#ng Di-n th@c phPc "P
cho cng tc sa' ny%
Qinh "i!n 9g'y:n R'5c L0o
S
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
2/86
n tt nghip Nguyn Quc Bo T12-K46
MC LC
&TU 9VU WX%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%Y
Z;[\9] S^ Z_Z M;_U 9U` Z\ L9%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
S% ng " D-t n5i )ng%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%d% Zc loi hnh )ng%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%SS
Z;[\9] d^ eH Qf H;UH L 9] H;j9] H;[T9]%%%%%%%%%%%%%%%%%%%%SY
S% Zp%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%SYd% Za2> )ng%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%SYk% ;'b%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%Sm% L2i>g(%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%S% Qitch%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%S
Y% o't(2%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%S% Za2> )ng Dhng >$y " iq) t2'y cp%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%S
Z;[\9] k^ j ;r9; QU K HZuvUu%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%S
S% hnh QU%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%SS%S% Mi-n t2c ph$n tng%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%SS%d% Zh@c nOng ca cc tng t2ong ) hnh QU%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%SwS%k% R'an h6 gi#a cc tng t2ong ) hnh QU%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%dS
d% hnh HZuvUu%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%dkd%S% Mi-n t2c ph$n tng%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%dkd%d% Zc tng t2ong ) hnh HZuvUu%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%dmd%k% ]iao th@c Uu%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%dY
u;W9 d^ H;UH M 9] &x9 K x9%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%kd
Z;[\9] S^ H;UH M 9] &x9%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%kd
S%z!' c' ch'ng%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%kdd% &8p S%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%kmk% &8p d%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%km% &8p k%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%k
S% &8p t2'y cp%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%kd% &8p ph$n b5%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%kk% &8p l{i%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%kwS% Zc b8c thi-t D- )ng x9%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%m|d% Nt s5 topology )ng x9%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%mSk% hnh ph$n l8p )ng x9%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%mk
u;W9 k^ eH Qf u;[\9] H;}Z H~9 Zj9] K Z_Z LU`9 u;_uL K` 9]%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%m
Z;[\9] S^ eH Qf u;[\9] H;}Z H~9 Zj9] %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%mZ; zX%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%m
d
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
3/86
n tt nghip Nguyn Quc Bo T12-K46
S% Zc "/n A ch'ng %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%md% H/n cng ch Nng%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%mY
d%S% uh.ng php t/n cng t2'y cp " po2t s(2c'2ity%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%kS%d% K&x9%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
d% o't(2%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%wd%S% uasso2> t2'y cp%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%Y|d%d% xcc(ss Zont2ol &ists%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%YSk% Hng lIa%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%Ykk%S% uacD(t ilt(2ing i2(all %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%Ymk%d% xpplication lay(2 ]at(ays%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%Ymk%k% Qtat('l insp(ction%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%YY
k%m% Nt s5 ) hnh )ng c t2iqn Dhai bng i2(all %%%%%%%%%%%%%%%%%%%%%%YYm% Hhi-t bF pht hi6n *$) nhp h6 th5ng%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%Y
m%S% 9(to2DJbas(> U U U
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
4/86
n tt nghip Nguyn Quc Bo T12-K46
d% Qitch%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%d%S% Z/' hnh passo2> t2'y nhp%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%d%d% Z/' hnh K&x9%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
MH &X9%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%d
9;9] H;XH 9] KUH HH%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%m
HU &U`X H;x M;%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%Y
m
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
5/86
n tt nghip Nguyn Quc Bo T12-K46
MC LC HNH
;r9; S%S%S^ eH ;` H;f9] 9] \9 ]U9%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%w
;r9; S%S%d^ eH Qf Hu&]z 9] H;j9] H;[T9]%%%%%%%%%%%%%%%%SS
;r9; S%S%k^ uBB H uBB 9BHM%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%Sd;r9; S%S%m^ Z&UB9HvQBKB 9BHM%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%Sk
;r9; S%k%S^ j ;r9; QU HW9]%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%Sw
;r9; S%k%d^ RXx9 ;` ]Ux Z_Z HW9] H9] j ;r9; QU%%%%%%%%%dS
;r9; S%k%k^ RX_ Hr9; B9ZxuQX&xHU9%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%dd
;r9; S%k%m^ Q Q_9; ]Ux QU K HZuvUu%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%dm
;r9; S%k%^ Z_Z &u x Z; Uu%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%d
;r9; d%S%S^ j ;r9; H;UH M 9] &x9%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%kk
;r9; d%S%d^ Z_Z &u H9] H;UH M 9] &x9%%%%%%%%%%%%%%%%%%%%%%%%%%%km
;r9; d%S%k^ Z_Z ]VU HU9 Z;z H9] K&x9%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%kY
;r9; d%d%S^ j ;r9; u;9 &u H9] H;UH M 9] &x9%%%%%%k
;r9; d%k%S^ j ;r9; uU9H H uU9H%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%mS
;r9; d%k%d^ j ;r9; QHx%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%md
;r9; d%k%k^ j ;r9; BQ;%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%md;r9; d%k%m^ j ;r9; u;9 &u H9] H;UH M 9] x9%%%%%mk
;r9; k%S%S^ RX_ Hr9; LH Hxz k L[Z kJ xz ;x9
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
6/86
n tt nghip Nguyn Quc Bo T12-K46
LI NI U
9gy nay, t/t c0 cc n8c t2!n th- gi8i A' ang >nh s ' t 2/t to
l.n q pht t2iqn cng ngh6 thng tin% Zng "8i "i:n thng, tin h4c l )Nt
thnh phn c5t l{i ca cng ngh6 thng tin% Hh't ng# )ng )y tnh 1
t2 n!n 3'(n th'Nc " t2 thnh 5i tng nghi!n c@', @ng >Png ca 2/t nhiA'
ngi cE nghA nghi6p " ph) "i hot Nng Dhc nha'%
H Dhi 2a i, )ng )y tnh 1 p @ng nh' c' chia s ng'n ti
ng'y!n, gi0) chi ph Dhi )'5n t2ao i ># li6' " c sI >Png t2ong cng
tc "On phng )Nt cch 2/t ti6n li% -n nay, >o s pht t2iqn ca *1 hNi, nh'c' t2ao i thng tin ngy )Nt nhiA', " "y )ng )y tnh Dhng ngng
pht t2iqn, Dhng ngng t5i ' ho cc >Fch "P q p @ng y!' c' E% H2ong
nh#ng nO) gn $y, int(2n(t 1 t2 thnh )Nt cng cP 2/t th'n ti6n " ph
bi-n t2ong cc hot Nng Dinh >oanh " gi0i t2%
H2ong )i t2ng )ng, )Nt lng thng tin hay )Nt Dh5i ># li6' i
t ngi gIi -n ngi nhn thng ph0i 3'a nhiA' nt "8i sI >Png Dhcnha', Dhng cE ai cE thq 0) b0o 2ng thng tin Dhng bF sao chp, nh cGp
hay *'y!n tc% ng h6 th5ng )ng )Nt cch an ton nh) to 2a )Nt )i t2ng
)ng t2ong sch ang l )Nt "/n A c 2/t nhiA' t ch@c, >oanh nghi6p,
3'5c gia 3'an t$)% q l) c iA' ny, cc c. 3'an t ch@c cn ph0i *$y
>ng cho )nh )Nt chnh sch b0o "6 )i t2ng )ng ca )nh )Nt cchthi-t thc nh/t%
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
7/86
n tt nghip Nguyn Quc Bo T12-K46
9Ni >'ng n c chia thnh cc phn^
%h&n '( )*ng +,-n v. !ng !/ #0nh
%h&n 1( )h23# 43 !ng LAN v 5AN
%h&n 6( M7# 89 phng php #:n c;ng v cc b2?/ @ng !; hBnh h< #h9ng !; phng
D3# E,"n
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
8/86
n tt nghip Nguyn Quc Bo T12-K46
%HN '( )FNG UAN J MKNG M )NH
CHONG '( CC DHI NIPM C QN
'R Mng v 43# n92 !ng
)@c N c. b0n nh/t, )ng n(to2D bao g) hai )y tnh n5i "8i
nha' bng cp cabl( sao cho chng cE thq >ng ch'ng ># li6'% 4i )ng
)y tnh cho > tinh "i ph@c tp -n bao nhi!' i n#a th c=ng A' bGt ' t
nh#ng h6 th5ng .n gi0n nh "y% $y chnh l )Nt thnh t' l8n lao t2ong
cng ngh6 t2'yAn thng%
ng )y tnh pht sinh t nh' c' chia s sha2( ># li6' ca ngi>ng )y tnh% y tnh c nh$n l cng cP t'y6t "i gip to ># li6', b0ng
tnh, hnh 0nh " nhiA' >ng thng tinh Dhc nhng li Dhng cho php nhanh
chEng chia s ># li6' bn 1 to cho )4i ngi cng *() " thng th@c%
Mhng cE h6 th5ng )ng ># li6', )'5n )ang thng tin sang cc )y
tnh Dhc bn ch cE thq >ng t8i s gip ca a )A) loppy, ho7c l in
ti li6' cn chia s 2a gi/y% E l s hn ch- 2/t l8n ca "i6c thi-' )i t2ng)ng% $y chnh l s l) "i6c t2ong )i t2ng Nc lp, >o E hi6' 3'0
cng "i6c Dhng cao% 9-' )Nt ngi t2ong )i t2ng Nc lp n5i )y tnh
ca )nh "8i )y tnh ca nhiA' ngi Dhc, anh ta s cE thq sI >Png ># li6'
t2!n cc )y tnh Dhc, Dq c0 )y in%
Nt nhE) )y tnh " cc thi-t bF ngoi "i D-t n5i "8i nha' bi cc
ng truyn vt l theo mt kin trcno E c g4i l )ng n(to2D,cn Dhi ni6) cc )y tnh n5i "8i nha' >ng ch'ng ti ng'y!n g4i l n5i
)ng n(to2Ding%
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
9/86
n tt nghip Nguyn Quc Bo T12-K46
Hnh 1.1.1: Mt h th!ng m"ng #n gi$n
ng t2'yAn "t lC >ng q t2'yAn cc tn hi6' i6n tI gi#a cc )y
tnh% ;i6n nay c0 hai loi ng t2'yAn h#' t'y-n cabl( " " t'y-n
i2(l(ss A' c sI >Png t2ong "i6c n5i D-t )ng )y tnh%
ng t2'yAn h#' t'y-n g) cE^
Zp ng t2Pc co*ial cabl(%
Zp i *oGn tist(> pai2 cabl(, g) hai loi QHu " XHu%Zp 3'ang ib(2 optic cabl(%
ng t2'yAn " t'y-n g) cE^
a>io%
QEng cc ngGn )ic2o a"(%
;ng ngoi in2a2(>%
Mi-n t2c )ng )y tnh n(to2D a2chit(ct'2( thq hi6n cch n5i cc)y tnh "8i nha' 2a sao " tp hp cc 3'y tGc, 3'y 8c ) t/t c0 cc thc
thq tha) gia t2'yAn thng t2!n )ng ph0i t'$n th(o q 0) b0o cho )ng
hot Nng t5t% Zch n5i cc )y tnh g4i l topology ca )ng, cn tp hp
cc 3'y tGc, 3'y 8c t2'yAn thng g4i l giao th@c p2otocol ca )ng%
Hopo )ng^Nt s5 topo thng c >ng l^
w
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
10/86
n tt nghip Nguyn Quc Bo T12-K46
L's *a lN^ H/t c0 cc t2) ph$n chia ch'ng )Nt ng t2'yAn chnh%
ng t2'yAn ny c gi8i hn d ' bi )Nt loi ' n5i 7c bi6t g4i l
termin%tor. i t2) c n5i "o b's 3'a )Nt ' n5i ch# H% Mhi S t2)
t2'yAn ># li6', tn hi6' c 3'0ng b t2!n d chiA' ca b's, ngha l t/t c0 cc
t2) cn li A' cE thq nhn c%
ing "ng^ Hn hi6' c l' ch'yqn t2!n "ng th(o )Nt chiA' >'y
nh/t% i t2) c n5i "8i "ng 3'a )Nt bN ch'yqn ti-p 2(p(at(2 cE nhi6)
"P nhn tn hi6' " ch'yqn -n t2) D- ti-p t2!n "ng% Zn thi-t ph0i cE giao
th@c iA' Dhiqn "i6c c/p pht 3'yAn c t2'yAn ># li6' t2!n "ng cho cc
t2) cE nh' c'%Qta2 hnh sao^ H/t c0 cc t2) c n5i "o S thi-t bF t2'ng t$) cE
nhi6) "P nhn tn hi6' t cc t2) " ch'yqn -n t2) ch ca tn hi6'% H'
th(o y!' c' ca t2'yAn thng )ng thi-t bF t2'ng t$) cE thq l )Nt bN
ch'yqn )ch sitch, bN ch4n ng 2o't(2 ho7c .n gi0n l )Nt bN ph$n
D!nh h'b% Qta2 l topo lGp 7t .n gi0n, >: c/' hnh, >: Diq) sot " DhGc
phPc s c5% H'y nhi!n N >i ng t2'yAn "8i thi-t bF t2'ng t$) bF hn ch-Dho0ng S||)%
B*t(n>(> sta2 hnh sao ) 2Nng^ 9E c=ng t.ng t >ng hnh sao%
Zc bN tp t2'ng ca cc )ng hnh sao li c c n5i "o )Nt bN tp
t2'ng Dhc%
;i(2a2chical ph$n l8p^ Hopo ny c=ng t.ng t nh >ng sao )
2Nng% Q Dhc bi6t $y l $y Dhng sI >Png nt t2'ng t$) nh hnh sao
) 2Nng%
(sh tng hp^ H2ong >ng ny, t/t c0 cc thi-t bF A' cE ng n5i
t2c ti-p -n thi-t bF Dhc% [' iq) ca >ng ny l 0) b0o )ng "?n hot
Nng bnh thng t2ong t2ng hp cE )Nt "i D-t n5i no E bF h+ng% H'y
nhi!n >ng ny chi ph cao >o )/t nhiA' >$y n5i gi#a cc t2)% Hopo ny
thng c >ng t2ong cc )ng l{i bacDbon(%
S|
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
11/86
n tt nghip Nguyn Quc Bo T12-K46
Hnh 1.1.&: Mt '! to(ology m"ng th)ng thng
1R Cc E2 hBnh !ngHh(o c. ch- hot Nng th )ng )y tnh c chia l) hai loi, E l
)ng ngang hng " )ng >a t2!n )y phPc "P%
ng ngang hng p((2 to p((2^
ng ngang hng l s la ch4n lC tng cho cc )i t2ng )ng^
ZE t h.n S| ngi >ng%
H/t c0 ngi >ng A' t2ong )Nt Dh' "c%Hnh b0o )t Dhng ph0i l "/n A 3'an t24ng%
Q5 ngi >ng " )ng s hn ch- pht t2iqn t2ong t.ng lai gn%
SS
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
12/86
n tt nghip Nguyn Quc Bo T12-K46
Hnh 1.1.*: +eer to (eer net,ork
H2ong )ng ngang hng ngi >ng cE thq 3'0n lC ti ng'y!n ca )nh, cE
thq chia s c=ng nh Dhng cho php t2'y cp ># li6' t nh#ng ngi >ng
Dhc% Nt ' iq) 2/t l8n ca )ng ngang hng l 2/t >: ci 7t " sI >Png%
9h "y t2ong )Nt s5 t2ng hp sI >Png )ng ngang hng l )Nt gi0i php
t.ng 5i t5t%
ng >a t2!n )y phPc "P cli(ntvs(2"(2^
H2ong t2ng hp cE nhiA' h.n S| ngi >ng )ng ngang hng s
Dhng p @ng c y!' c' 7t 2a% K th- h' h-t cc )ng A' cE )y phPc
"P ch'y!n >Png% y phPc "P ch'y!n >Png l )y ch hot Nng nh )Nt
)y phPc "P ch@ Dhng Di!) l'n "ai t2 ca )y Dhch hay )y t2)% y
phPc "P cE tnh ch'y!n >Png " chng c thi-t D- t5i ' ho q phPc "P
nhanh y!' c' ca Dhch t2!n )ng c=ng nh 0) b0o an ton cho tp tin "
th )Pc% ng >a t2!n )y phPc "P 1 t2 thnh ) hnh ch'n cho h6
th5ng )ng ngy nay%
ng >a t2!n )y phPc "P 1 gi0i 3'y-t c )Nt s5 nhc iq) ca )ng
ngang hng, "/n A an ninh " ) 2Nng )ng 1 c p @ng t5t h.n% H'y
nhi!n nE c=ng cE )Nt s5 nhc iq) nh/t Fnh% Zc )y s(2"(2 y!' c' c/'
hnh cao " thng thng 2/t Gt% 9goi 2a n-' ch >ng )Nt )y s(2"(2 th
)ng s ngng l) "i6c n-' nh s(2"(2 h+ng%
Sd
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
13/86
n tt nghip Nguyn Quc Bo T12-K46
Hnh 1.1.-: lient/'erver net,ork
Nt s5 )y phPc "P ch'y!n >Png^
y phPc "P tp tin, in /n il(vp2int s(2"(2%
y phPc "P th tn )ail s(2"(2%
y phPc "P a* a* s(2"(2%
y phPc "P (b (b s(2"(2%
Hh(o ph$n "ng Fa lC th )ng )y tnh c chia thnh cc loi hnh
sa'^
ng cPc bN &x9 local a2(a n(to2D^
$y l loi hnh )ng c ci 7t t2ong )i t2ng t.ng 5i nh+ "
>P t2ong S to nh, t2ong )Nt t2ng h4c % Nt s5 cng ngh6 )ng &x9
thng >Png l Bth(2n(t, HocD(n ing, i6n 2Nng x9 i>( x2(a 9(to2D^
ng x9 D-t n5i cc )ng t2ong )Nt "ng Fa lC 2Nng, ph) "i cE
thq l t2ong )Nt 3'5c gia " th) ch c0 lPc Fa% Nt s5 cng ngh6 thng
>ng t2ong )ng x9 l UQ Q(2"ic(s
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
14/86
n tt nghip Nguyn Quc Bo T12-K46
n(to2D^
Mhi cE hai thc thq )'5n t2ao i thng tin th gi#a chng thi-t lp )Nt
D!nh c5 Fnh " c >'y t2 cho -n Dhi )Nt t2ong hai b!n ngGt li!n lc% Zc
># li6' ch c t2'yAn th(o )Nt ng c5 Fnh E% uh.ng php ny cE hai
nhc iq) E l ph0i )/t thi gian thi-t lp D!nh c5 Fnh gi#a hai thc thq" hi6' s'/t sI >Png ng t2'yAn Dhng cao t2ong t2ng hp c0 hai b!n A'
h-t thng tin q t2'yAn t2ong Dhi cc thc thq Dhc Dhng c sI >Png D!nh
ny%
ng ch'yqn )ch thng bo )(ssag( sitch(> n(to2D^
Hhng bo )(ssag( l )Nt .n "F thng tin ca ngi sI >Png cE
Dh'n >ng c 3'y Fnh t28c% i thng bo A' cE "ng thng tin iA'Dhiqn t2ong E ch Fnh 2{ ch ca thng bo% ZOn c@ "o thng tin ny )
)i nt cE thq ch'yqn thng bo -n nt D- ti-p t2ong ng >?n -n ch
ca nE% H' th'Nc "o iA' Di6n ca )ng, cc thng bo Dhc nha' cE thq
c gIi i t2!n cc con ng Dhc nha'% uh.ng php ny cE hi6' s'/t sI
>Png ng t2'yAn cao, )i nt )ng cE thq l' t2# thng bo cho -n Dhi
D!nh t2'yAn 2i 2i )8i gIi thng bo i >o E gi0) c tnh t2ng tGc
nghn%
ng ch'yqn )ch gEi pacD(t sitch(> n(to2D^
i thng bo c chia thnh nhiA' phn nh+ h.n g4i l cc gEi tin
pacD(t cE Dh'n >ng 3'y Fnh t28c% i gEi tin c=ng ch@a cc thng tin
iA' Dhiqn t2ong E cE Fa ch ng'n " Fa ch ch% Zc gEi tin th'Nc )Nt
thng bo no E cE thq i th(o cc con ng Dhc nha' q i -n ch%
uh.ng php ny c=ng t.ng t nh ph.ng php ch'yqn )ch thng bo%
Sm
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
15/86
n tt nghip Nguyn Quc Bo T12-K46
iq) Dhc bi6t l ch gEi tin c gi8i hn Dch th8c sao cho cc nt
)ng cE thq *I lC ton bN gEi tin ) Dhng ph0i l' t2# t) thi% Li "y
)ng ch'yqn )ch gEi t2'yAn cc gEi tin nhanh h.n " hi6' 3'0 h.n so "8i
ch'yqn )ch thng bo% K/n A c. b0n nh/t ca ph.ng php ny l tp hp
cc gEi tin " sGp *-p sao cho ng th@ t t2ong t2ng hp cc gEi i th(o
cc ng Dhc nha'% 9h "y cn ph0i cE cc c. ch- nh >/' gEi tin "
phPc hi cc gEi tin bF th/t lc ho7c bF li t2ong 3' t2nh t2'yAn%
S
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
16/86
n tt nghip Nguyn Quc Bo T12-K46
CHONG 1( MS) T )HIV) QW MKNG )HXNG )HONG
'R Cp
Zp >ng l) ph.ng ti6n t2'yAn >?n D-t n5i gi#a cc thnh phn ca)ng "8i nha'% ZE )Nt s5 loi cp thng thng l cp ng t2Pc co*ial,
cp *oGn i tist(> pai2 " cp si 3'ang ib(2 optic%H2ong ) hnh QU
cp c coi l thi-t bF tng S%
0$ng 1.&.1: Mt '! lo"i c( th)ng 23ng
Zp ngt2Pc )0nh
S|Las(d
Zp ngt2Pc >y
S|Las(
Zp *oGn i
S|Las(HZp 3'ang
Zhi phZao h.n cp
*oGn i
Zao h.n cp
)0nhHh/p nh/t Zao nh/t
N >i t5i a S) ||) S||) ZE thq 2/t *aH5c N
t2'yAn
S|bps S|bps S|, S||bpsZao h.n
S||bpsZi 7t Png
H2ong cc Fa
iq) cE y!'
c' b0o )t
cao
QI >Png 2/t
ph bi-n
9h#ng )i
t2ng i
h+i t5c N,
b0o )t cao
1R C-Y@ !ng
Za2> )ng 9(to2D Unt(2ac( Za2> 9UZ >ng q D-t n5i gi#a )y
tnh " ph.ng ti6n t2'yAn >?n% i ca2> )ng c i >i6n bi )Nt Fa ch
xZ (>ia xcc(ss Zont2ol >i mbit 3'y Fnh bi nh s0n *'/t% H2ong
)ng &x9 th Fa ch xZ c >ng q 3'y-t Fnh iq) -n ca gEi tin%
9UZ c coi l thi-t bF tng d t2ong ) hnh QU%
SY
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
17/86
n tt nghip Nguyn Quc Bo T12-K46
6R H,b
c >ng t2ong )ng &x9, hot Nng tng S physical%H2!n ;'b
cE nhiA' cng q D-t n5i "8i )y tnh% Zc )y tnh c n5i "o ;'b s
n) t2ong S "ng *'ng Nt collision >o)ain% H2ong cng S thi iq) ch cE
S )y c gIi >= li6' i% Zc )y bF chia s ban>i>th nhng b li gi
thnh li 2% 9gy nay ;'b t c sI >ng " c thay th- bng sitch%
=R QY2@gZ
;ot Nng tng d g( >ng q D-t n5i d ho7c nhiA'
)ng &an "8i nha'% )i cng ca b2i>g( l )Nt "ng *'ng Nt% L2i>g(>ng Fa ch xZ q 3'y-t Fnh *() cE cho gEi tin i 3'a Dhng% H5c N
hot Nng ca b2i>g( cao h.n ca h'b%
[R T\2#ch
;ot Nng tng d% Z=ng gi5ng nh b2i>g(, sitch >ng q D-t n5i cc
)ng &an "8i nha'% Hhay " >ng phn )A) nh b2i>g(, sitch >ng phn
c@ng n!n t5c N hot Nng nhanh h.n 2/t nhiA'
]R ^,#ZY
;ot Nng tng k 9(to2D% i cng ca 2o't(2 l )Nt "ng 3'0ng
b b2oa>cast >o)ain% o't(2 hot Nng >a t2!n Fa ch tng k, cE nhi6) "P
*c Fnh ng i t8i ch t5i ' cho cc gEi ># li6', Fnh t'y-n iA' Dhiqn
l'ng q 0) b0o t5c N " tnh ton "n ca ># li6'%
_R C-Y@ !ng 4h;ng @?/ v `2a! #Y,/ c"p
Mhi >ng )ng Dhng >$y )i )y tnh c=ng cn )Nt thi-t bF D-t n5i
"8i ng t2'yAn g4i l i2(l(ss 9ic% Zc )y tnh s c D-t n5i thng 3'a
)Nt iq) t2'y cp ch'ng g4i l xcc(ss uoint xu% Zhng ta cE thq coi nh
xcc(ss uoint gi5ng nh l h'b t2ong )ng &x9 thng thng%
S
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
18/86
n tt nghip Nguyn Quc Bo T12-K46
CHONG 6( MX HNH TI )C%dI%
'R M; hBnh TI
q gi0) N ph@c tp Dhi thi-t D- " ci 7t )ng, h' h-t cc )ng)y tnh A' c ph$n tch " thi-t D- th(o 3'an iq) ph$n tng% i h6
th5ng thnh phn ca )ng c *() l )Nt c/' t2c a tng t2ong E )i
tng c *$y t2!n tng t28c E% Q5 lng cc tng c=ng nh t!n " ch@c
nOng ca cc tng t' th'Nc "o nh thi-t D-%
Mhi thi-t D- cc nh thi-t D- t la ch4n Di-n t2c )ng 2i!ng ca )nh,
t E >?n -n tnh t2ng Dhng t.ng thch gi#a cc )ng^ ph.ng php t2'ynhp ng t2'yAn Dhc nha', sI >Png cc bN giao th@c Dhc nha' Q
Dhng t.ng thch ny g$y 2a nh#ng DhE DhOn t2ong "i6c t.ng tc gi#a
nh#ng ngi sI >Png% Zc nh s0n *'/t " cc nh nghi!n c@', thng 3'a cc
t ch@c ch'n ho 3'5c gia " 3'5c t-, tch cc t) 2a s hNi tP cho cc s0n
ph) )ng t2!n thF t2ng% ! cE c iA' E, t28c h-t cn *$y >ng c
)Nt Dh'ng ch'n "A Di-n t2c )ng q l) cOn c@ cho cc nh thi-t D- " ch-to cc s0n ph) "A )ng%
K lC >o E, H ch@c ti!' ch'n ho 3'5c t- UQ Unt(2national
2ganiation o2 Qtan>a2>iation 1 *$y >ngM) hnh th%m chiu cho vic
kt n!i cc h th!ng m4 ((22(nc( o>(l o2 p(n Qyst()s
Unt(2conn(ction% hnh ny c >ng l) c. s cho "i6c n5i D-t cc h6
th5ng ) phPc "P cho cc @ng >Png ph$n tn% $y nEi l!n Dh0 nOng d
h6 th5ng cE thq n5i D-t q t2ao i thng tin "8i nha' n-' chng t'$n th )
hnh tha) chi-' " cc ch'n li!n 3'an%
S%S% Mi-n t2c ph$n tng
hnh QU c chia l) tng% i tng QU cE nh#ng ch@c nOng
)ng c Fnh 2{, cc ch@c nOng ca )i tng giao ti-p "8i ch@c nOng ca
tng ngay b!n t2!n " ngay b!n >8i nE% Hng th/p nh/t Fnh ngha ph.ng
S
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
19/86
n tt nghip Nguyn Quc Bo T12-K46
ti6n "t lC ca )ng " cc tc "P li!n 3'an nh a bit ># li6' l!n ca2> )ng
" cp% Hng cao nh/t Fnh ngha cch th@c ch.ng t2nh @ng >Png t2'y cp
cc >Fch "P t2'yAn thng% Hng cng cao nhi6) "P ca tng cng t2 n!n ph@c
tp%
% }ng >Png xpplication &ay(2
Y% H2nh >i:n u2(s(ntation &ay(2
% uhi!n Q(ssion &ay(2
m% ]iao "n H2anspo2t &ay(2k% ng 9(to2D &ay(2
d% &i!n D-t ># li6' = li6' q ch'yqngiao 3'a )ng -n cc )y tnh Dhc% i tng c *$y >ng >a t2!n cc
ti!' ch'n " hot Nng ca tng t28c E%
S%d% Zh@c nOng ca cc tng t2ong ) hnh QU
Hng "t lC^
&i!n 3'an -n nhi6) "P t2'yAn >ng bit Dhng cE c/' t2c 3'a ng
t2'yAn "t lC, t2'y nhp ng t2'yAn "t lC nh cc ph.ng ti6n c., i6n,
h), th tPc% Hng "t lC Fnh ngha cch D-t n5i gi#a cp " ca2> )ng nh
th- no% Zhng hn, nE Fnh 2{ bN n5i cE bao nhi!' ch$n " ch@c nOng ca
tng ch$n nh th- no% Hng ny c=ng Fnh 2{ D th't t2'yAn no s c
>ng q gIi ># li6' l!n cp )ng%
Hng "t lC chF' t2ch nhi6) t2'yAn bit bit | " bit S t )y tnh ny
sang )y tnh Dhc% L0n th$n bit Dhng cE C ngha 2{ 26t% Hng "t lC Fnh 2{
Sw
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
20/86
n tt nghip Nguyn Quc Bo T12-K46
s )1 ho bit " s ng bN, b0o 0) 2ng Dhi t2'yAn i bit S th s nhn
c bit S ch@ Dhng ph0i l bit |% Hng "t lC c=ng Fnh 2{ )i bit Do >i
bao l$' " c >i:n >Fch thnh *'ng i6n hay *'ng nh sng thch hp "8i
cp )ng nh th- no%
Hng li!n D-t ># li6'^
Z'ng c/p ph.ng ti6n q t2'yAn thng tin 3'a li!n D-t "t lC 0) b0o
tin cy, gIi cc Dh'ng ># li6' 2a)( "8i cc c. ch- ng bN ho, Diq) sot
li " Diq) sot l'ng ># li6' cn thi-t
Hng )ng^
Hhc hi6n "i6c ch4n ng " ch'yqn ti-p thng tin "8i cng ngh6ch'yqn )ch thch hp, thc hi6n "i6c Diq) sot l'ng ># li6' " cGtvhp >#
li6' n-' cn% Hng )ng c'ng c/p ph.ng ti6n q t2'yAn cc .n "F ># li6'
3'a )ng, bi "y nE cn ph0i p @ng "8i nhiA' Diq' )ng " nhiA' Diq'
>Fch "P c'ng c/p bi cc )ng Dhc nha'%
Hng giao "n^
Hhc hi6n "i6c t2'yAn ># li6' gi#a hai ' )t (n> to (n>, thc hi6n"i6c Diq) sot li " Diq) sot l'ng gi#a hai ' )t% Z=ng cE thq thc hi6n
"i6c ghp D!nh )'ltipl(*ing, cGtvhp ># li6' n-' cn% Hng giao "n l 2anh
gi8i gi#a cc tng th/p " cc tng cao t2ong ) hinh QU, nE "a ph0i bi-t
"A y!' c' ch/t lng >Fch "P R'ality o Q(2"ic( RQ ca ngi sI >Png
ng thi c=ng ph0i bi-t c Dh0 nOng c'ng c/p >Fch "P ca )ng b!n >8i%
Hng phi!n^
Z'ng c/p ph.ng ti6n 3'0n lC t2'yAn thng gi#a cc @ng >Png^ thi-t
lp, >'y t2, ng bN ho " h' b+ cc phi!n t2'yAn thng gi#a cc @ng >Png%
Hng t2nh >i:n^
Zh'yqn i c php ># li6' q p @ng y!' c' t2'yAn ># li6' ca cc
@ng >Png t2ong )i t2ng QU%
Hng @ng >Png^
d|
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
21/86
n tt nghip Nguyn Quc Bo T12-K46
Z'ng c/p cc ph.ng ti6n q ngi sI >Png cE thq t2'y nhp c "o
)i t2ng QU, ng thi c'ng c/p cc >Fnh "P thng tin ph$n tn%
S%k% R'an h6 gi#a cc tng t2ong ) hnh QU
9hi6) "P ca )i tng l c'ng c/p >Fch "P cho tng ngay b!n t2!n nE
" a y!' c' 5i "8i tng ngay b!n >8i nE% Zc tng c thi-t lp th(o
cch th@c 3'a E )i tng hot Nng nh thq nE ang giao ti-p "8i tng 5i
tc ca nE t2ong )y tnh Dhc% $y l >ng giao ti-p 0o hay giao ti-p logic
gi#a nh#ng tng ng )@c% Hht s l giao ti-p *0y 2a gi#a cc tng DA nha'
t2!n cng S )y tnh%
Hnh 1.*.&: u%n h gi;% cc t9ng trong m) hnh 567
Hhng tin t2'yAn t2!n )ng gi#a ng'n " ch c g4i l cc gEi >#
li6' >ata pacD(ts% Nt )y tnh host x )'5n gIi ># li6' -n )Nt )y tnh
Dhc host L th ># li6' ph0i t'$n th(o )Nt 3' t2nh g4i l 3' t2nh Eng
gEi Bncaps'lation%
Mhi ># li6' chy t tng t2!n *'5ng tng >8i, )i tng s th!) )Nt
phn ' h(a>(2 " cE thq l phn c'5i t2ail(2 "o ># li6' t28c Dhi ch'yqn
*'5ng tng >8i% Zc phn h(a>(2 " t2ail(2 ny ch@a thng tin iA' Dhiqn
cho cc thi-t bF )ng " ' nhn q 0) b0o ># li6' c ch'yqn -n ng
n.i nhn% Hhng tin t tng @ng >Png 3'a tng t2nh >i:n s c ch'yqn i
dS
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
22/86
n tt nghip Nguyn Quc Bo T12-K46
sao cho nE cE thq t2'yAn 3'a )ng% tng giao "n, ># li6' s c Eng gEi
q thc hi6n t2'yAn gi#a hai ' )t (n> to (n>% R'a tng )ng, Fa ch
)ng s c th!) "o phn h(a>(2% uhn h(a>(2 th!) "o ny ch@a Fa ch
logic ca ng'n " ch% -n tng li!n D-t ># li6' cc gEi ># li6' s c
ch'yqn thnh cc Dh'ng 2a)(% uhn h(a>(2 ca Dh'ng s ch@a thng tin "A
Fa ch "t lC ca ng'n " ch% 9goi 2a cE thq cE th!) phn t2ail(2 ch@a
thng tin sIa li% -n tng "t lC ># li6' s c ch'yqn thnh >ng bit q
t2'yAn t2!n ng t2'yAn -n n.i nhn%
Hnh 1.*.*: u trnh Png, )4i thng tin "A Fa ch 1
c loi b+, ># li6' t2 "A >ng ban ' ) )y nhn cE thq 4c c%
9goi t2 tng th/p nh/t t2ong ) hnh )ng, Dhng tng no cE thq
t2'yAn t2c ti-p thng tin sang tng t.ng @ng t2!n )y tnh Dhc% Hhng tin
dd
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
23/86
n tt nghip Nguyn Quc Bo T12-K46
cn ph0i t2'yAn *'5ng cc tng >8i " )y nhn li t2'yAn ngc l!n tng
t.ng @ng% K >P tng )ng ca )y gIi host x gIi thng tin th nE s 3'a
tng li!n D-t ># li6' " tng "t lC 2i 3'a cp )ng -n tng "t lC ca )y
nhn host L, sa' E 3'a tng li!n D-t ># li6' " -n n.i nhn l tng )ng%
i tng cE )Nt giao th@c iA' Dhiqn 2i!ng ca nE% ]iao th@c ny s
3'y-t Fnh tng >8i s ph0i c'ng c/p nh#ng >Fch "P no cho tng t2!n " 3'y
Fnh 2{ nh#ng >Fch "P ny c t2'y cp nh th- no%
1R M; hBnh )C%dI%
d%S% Mi-n t2c ph$n tngZ=ng gi5ng nh ) hnh QU, ) hnh HZuvUu H2ans)ission Zont2ol
u2otocolvUnt(2n(t u2otocol c=ng sI >Png Di-n t2c ph$n tng% HZu l )Nt
giao th@c Diq' cE D-t n5i Zonn(ction 2i(nt(>, t@c l cn ph0i cE )Nt giai
on thi-t lp li!n D-t gi#a d thc thq HZu t28c Dhi chng thc hi6n t2ao i
># li6'% Uu l )Nt giao th@c Diq' Dhng cE D-t n5i Zonn(ctionl(ss, ngha l
Dhng cn ph0i thi-t lp D-t n5i t28c Dhi thc hi6n t2ao i thng tin% H2ong) hnh HZuvUu Dhng ch sI >Png hai giao th@c HZu " Uu ) ngoi 2a cn
sI >Png 2/t nhiA' cc giao th@c Dhc nh XPng d giao th@c l HZu " Uu%
dk
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
24/86
n tt nghip Nguyn Quc Bo T12-K46
Hnh 1.*.-: 6o 'nh gi;% 567 v= >+/7+
hnh HZuvUu g) m tng^ Hng @ng >Png xpplication, tng giao
"n H2anspo2t, tng Unt(2n(t, tng t2'y cp )ng 9(to2D xcc(ss% H.ng
3'an gi#a ) hnh HZuvUu " ) hnh QU nh t2!n hnh%
d%d% Zc tng t2ong ) hnh HZuvUu
Hng @ng >Png^
Hng @ng >Png ca HZuvUu t.ng .ng "8i k tng t2!n cng ca )
hnh QU >o "y nE )ang ch@c nOng tng hp ca c0 k tng% Nt s5 giao th@c
thng >ng ca tng @ng >Png ^;HHu ;yp(2t(*t H2ans(2 u2otocol^ ]iao th@c ny sI >Png bi
o2l> i>( (b % ;HHu 3'y Fnh "i6c Fnh >ng " t2'yAn cc b0n
tin nh th- no%
Hu il( H2ans(2 u2otocol^ $y l giao th@c t2'yAn t6p, c sI
>Png q t2'yAn t )y ny sang )y Dhc% ]iao th@c ny 0) b0o s tin cy
" sI >Png Diq' cE D-t n5i%
dm
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
25/86
n tt nghip Nguyn Quc Bo T12-K46
HHu H2i"ial il( H2ans(2 u2otocol^ Z=ng l giao th@c t2'yAn t6p
nh Hu nhng l >ng Dhng D-t n5i% 9E Dhng 0) b0o s tin cy nhng
t5c N li nhanh h.n Hu 2/t nhiA'% 9E c sI >Png ch y-' t2ong )i
t2ng )ng &x9 " )i t2ng ny 2/t t *0y 2a li%
QHu Qi)pl( ail H2ans(2 u2otocol^ ]iao th@c ch'yqn (J)ail
t2ong )ng )y tnh%
H(ln(t H(2)inal ()'lation^ ]iao th@c cho php iA' Dhiqn S thi-t bF
t )Nt thi-t bF *a%
Q9u Qi)pl( 9(to2D anag()(nt u2otocol^ ]iao th@c cho php
3'an st " iA' Dhiqn cc thi-t bF )ng t2ong "i6c c/' hnh, b0o )tFch "P ch'yqn ># li6' t )y gIi sang
)y nhn% 9E thi-t lp S D-t n5i logic gi#a )y gIi " )y nhn (n> to (n>%9goi 2a nE c=ng tha) gia "o "i6c iA' Dhiqn l'ng " c'ng c/p thng tin
0) b0o N tin cy ca ># li6' nhn c%
&8p giao "n >ng hai giao th@c l HZu " X
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
26/86
n tt nghip Nguyn Quc Bo T12-K46
xu x>>2(ss (sol'tion u2otocol^ giao th@c ch'yqn t Fa ch Uu
sang Fa ch xZ t.ng @ng%
xu ("(s(2 xu^ giao th@c ch'yqn t Fa ch xZ sang Fa ch
Uu%
Hng t2'y cp )ng^
Hng ny t.ng .ng "8i d tng >8i cng ca ) hnh QU% 9E cE
nhi6) "P thi-t lp D-t n5i "t lC gi#a )y tnh " ng t2'yAn ca )ng%
Hng ny bao g) D th't ca )ng &x9 " x9% 9h "y cc cng ngh6
c sI >Png t2ong tng ny l Bth(2n(t, ast Bth(2n(t, t Unt(2n(t *'/t hi6n
t2ong t!n ca nE nhng Dhng nh/t thi-t ph0i sI >Png t2!n Unt(2n(t% Uu cE thq
sI >Png t2ong cc )ng ) Dhng cE li!n h6 g "8i int(2n(t%
Fa ch Uu^
q cE thq t2'yAn thng tin gi#a cc )y tnh t2ong )ng, )i )y tnh
cn cE )Nt Fa ch *c Fnh g4i l Fa ch Uu% ;i6n nay )i Fa ch Uu c to
bi )Nt s5 kd bit Up"m " c chia thnh m "ng% ]i#a cc "ng cch nha'
bi >/' ch/)% i "ng g4i l )Nt oct(t, g) S byt( cE thq biq' >i:n >8i
>ng thp ph$n, nhF ph$n nhng ph bi-n nh/t l biq' >i:n >8i >ng thp
ph$n% 9h "y )i Fa ch Uu c biq' >i:n bi m s5 cE gi t2F t | -n d%
K >P^ Swd%SY%S%|% i Fa ch Uu c 7t cho S host >'y nh/t t2!n )ng%
dY
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
27/86
n tt nghip Nguyn Quc Bo T12-K46
ZE k >ng Fa ch Uu ph bi-n^
Xnicast^ Hhq hi6n S Fa ch .n h8ng, l Fa ch >ng q nhn >ng
tng nt )ng )Nt%
'lticast^ Hhq hi6n S Fa ch a h8ng, l Fa ch nhn >ng )Nt
nhE) cc nt )ng no E% Mhi gEi ># li6' gIi -n Fa ch )'lticast nE s
c ch'yqn -n t/t c0 cc )y n) t2ong nhE) )'lticast ny%
L2oa>cast^ Hhq hi6n t/t c0 cc nt t2!n )ng, thng thng E l t/t
c0 cc host t2!n )Nt )ng con Fa ph.ng%
Zc Fa ch Uu c chia l) d phn, )Nt phn q *c Fnh )ng 9(tU
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
28/86
n tt nghip Nguyn Quc Bo T12-K46
Hnh 1.*.?: c l@( A% chB 7+
Fa ch l8p x^ Z'ng c/p cho cc )ng cE s5 lng )y tnh l8n% Lyt(
' ti!n *c Fnh Fa ch )ng, k byt( ti-p th(o *c Fnh Fa ch )y t2)%
ct(t ' ti!n ca Fa ch l8p x cE gi t2F t | -n Sd " cE bt ' ti!n l bit
|%Fa ch l8p L^ Z'ng c/p cho cc )ng cE s5 lng )y tnh t2'ng
bnh% ;ai byt( ' *c Fnh Fa ch )ng, d byt( c'5i *c Fnh Fa ch )y
t2)% ct(t ' ti!n cE gi t2F t Sd -n SwS " cE hai bit ' ti!n l S|%
Fa ch l8p Z^ Z'ng c/p cho cc )ng nh+, cE t )y tnh% La byt(
' ti!n *c Fnh Fa ch )ng, byt( c'5i cng *c Fnh Fa ch )y t2)%
ct(t ' ti!n cE gi t2F t Swd -n ddk " cE k bit ' ti!n l SS|%Fa ch l8p
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
29/86
n tt nghip Nguyn Quc Bo T12-K46
0$ng 1.*.1: +hCn l@( A% chB 7+
9(to2D class Q5 )ng Q5 host t2ong )ngx SdY d d SYdSm ddm dL SYkd dSm d Ykm dSY dZ d|wSS| ddS d dm d d
ZE )Nt s5 t2ng hp 7c bi6t^
H/t c0 cc bit ca phn host A' l |^ Fa ch )ng%
H/t c0 cc bit ca phn host A' l S^ Fa ch b2oa>cast%
H/t c0 cc bit ca phn n(to2D A' l | ho7c A' l S^ Mhng c
sI >Png%Fa ch Sd%*%*%* ng t2ong cc t2ng hp 7c bi6t% K >P Fa ch
loopbacD Sd%|%|%S
Q'bn(t asD^
q ti6n cho "i6c 3'0n lC Fa ch Uu, )i )ng cE thq chia thnh cc
)ng con s'bn(ts% Hhc ch/t "i6c chia nh+ ny l >ng ph.ng php )n
)Nt s5 bit t2ong phn host bit q l) n(to2D bit% Ki6c ny c thc hi6n
bng Fa ch s'bn(t )asD% Q'bn(t )asD c=ng gi5ng nh Fa ch Uu, g) kd bit
t2ong E^
Zc bit S >ng q *c Fnh Fa ch )ng t2!n Fa ch Uu%
Zc bit | ng q *c Fnh Fa ch host t2!n Fa ch Uu%
K >P Fa ch l8p x l S|%|%|%, n-' Dhng )n bit no th s'bn(t )asD cE
gi t2F l d%|%|%|, n-' )n bit phn host q l) Fa ch )ng th s'bn(t
)asD s cE gi t2F l d%d%|%|
H Fa ch Uu ta thc hi6n php ton logic x9< "8i Fa ch s'bn(t )asD
s 2a Fa ch )ng n.i -n% M-t 3'0 ny c >ng cho th't ton t) ng
t2!n )ng% K8i Fa ch s'bn(t )asD, s5 bit >ng q nh Fa ch cho host cE
thq nh+ h.n bnh thng% Zc )ng con thng c *c Fnh bng Fa ch
cE th!) phn ch thch s5 bit c >ng q nh Fa ch )ng% K >P )ng
dw
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
30/86
n tt nghip Nguyn Quc Bo T12-K46
Sd%SY%S%|vdm ) t0 s'bn(t Sd%SY%S%| th'Nc l8p L nhng cE dm bit >ng cho
Fa ch )ng " bit >ng cho Fa ch host% 9h "y )ng ny ch cE t5i a
dm )y ch@ Dhng ph0i l Ykm )y%
Fa ch Uu cng cNng u'blic Uu " Fa ch Uu c nh$n u2i"at( Uu^
Fa ch Uu t28c $y c 3'0n lC " ph$n ph5i bi 9UZ 9(to2D
Uno2)ation Z(nt(2 " b$y gi l Ux9x Unt(2n(t xssign(> 9')b(2s
x'tho2ity%
Fa ch Uu cng cNng l >'y nh/t, hai )y tnh D-t n5i "8i )ng cng cNng th
ph0i cE Fa ch Uu Dhc nha'% Fa ch Uu cng cNng ch c c'ng c/p bi ccnh c'ng c/p >Fch "P int(2n(t UQu ho7c b+ tiAn 2a )'a% ;i6n nay Fa ch Uu
cng cNng ang ngy )Nt cn Di6t% Ki6c sI >Png Fa ch Uu c nh$n l )Nt
cch 2/t t5t gEp phn ti-t Di6) Fa ch Uu%
u2i"at( Uu bao g) k >0i Fa ch^
S|%|%|%| -n S|%d%d%d
Sd%SY%|%| -n Sd%kS%d%dSwd%SY%|%| -n Swd%SY%d%d
Fa ch p2i"at( c sI >Png t2ong cc )ng nNi bN% Zc 2o't(2 t2!n
Unt(2n(t s b+ 3'a Fa ch p2i"at(% q D-t n5i gi#a )ng sI >Png Fa ch
p2i"at( " )ng int(2n(t cn cE )Nt bN ch'yqn i t Fa ch p2i"at( sang Fa
ch p'blic% Ki6c ch'yqn i ny c thc hi6n bi 9xH 9(to2D x>>2(ss
H2anslation%
9goi 2a q DhGc phPc tnh t2ng thi-' Fa ch Uu ngi ta cn sI >Png
)Nt s5 ph.ng php Dhc nh ph.ng php c'ng c/p Fa ch Uu Nng LHu
Lootst2ap u2otocol hay
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
31/86
n tt nghip Nguyn Quc Bo T12-K46
Nt cch Dhc n#a l "i6c nghi!n c@' pht t2iqn Fa ch Uu "(2sion Y
Up"Y% Up"Y >ng Sd bit, >o E s5 lng Fa ch l 2/t l8n, cE thq p @ng
c y!' c' ca s pht t2iqn nh hi6n nay%
kS
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
32/86
n tt nghip Nguyn Quc Bo T12-K46
%HN 1( )HIV) DV MKNG LAN 5AN
CHONG '( )HIV) DV MKNG LAN
'Re, c&, ch,ng
Hhi-t D- )Nt )ng )y tnh cE thq coi l )Nt nhi6) "P Dhng >: >ng,
nE Dhng .n gi0n ch l "i6c D-t n5i cc )y tnh "8i nha'% Nt )ng )y
tnh y!' c' 2/t nhiA' 7c iq) q 0) b0o tnh tin cy, Dh0 nOng 3'0n lC "
cE thq >: >ng ) 2Nng% 9gi thi-t D- )ng ph0i bi-t c 2ng )i phn
ca )ng cE nh#ng y!' c' thi-t D- Dhc nha'%
Hhng thng, "i6c thi-t D- )Nt )ng cn tho0 )1n cc y!' c' sa'^0) b0o ch@c nOng 'nctionality^ ng c thi-t D- cn ph0i l)
"i6c% ng cn p @ng nh#ng y!' c' ca ngi >ng, cE thq D-t n5i )4i
ngi "8i nha' ho7c l gi#a ngi >ng "8i cc @ng >Png " ph0i 0) b0o
t5c N c=ng nh N tin cy no E%
Mh0 nOng ) 2Nng Qcalability^ ng cE thq ) 2Nng c% ng
thi-t D- ban ' cE thq ) 2Nng ) Dhng ph0i thay i cc thnh phn chnhca )ng% $y l )Nt y!' c' t.ng 5i 3'an t24ng bi " ngy nay s pht
t2iqn "A s5 lng ngi >ng t2ong )ng l 2/t l8n%
Mh0 nOng thch @ng x>aptability^ ng c thi-t D- sao cho cE
Dh0 nOng thch @ng c "8i cc cng ngh6 ca t.ng lai, nE Dhng cE cc
y-' t5 cE thq l) gi0) nh#ng @ng >Png ca cc cng ngh6 )8i Dhi cc cng
ngh6 ny c sI >Png% K >P cp XHu Zat )8i ch sI >Png d i >$y, n-'sI >Png th!) cc i >$y n#a cE thq tOng t5c N l!n, t2ong Dhi E cp ng
t2Pc s Dhng p @ng c iA' ny%
Mh0 nOng 3'0n lC anag(ability^ ng c thi-t D- sao cho ngi
3'0n t2F >: >ng t2ong "i6c 3'0n lC " gi) st hot Nng ca )ng%
kd
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
33/86
n tt nghip Nguyn Quc Bo T12-K46
9goi cc y!' c' t2!n, t2ong thi-t D- )ng &x9 c=ng cn tnh -n )Nt s5
"/n A Dhc nh "ai t2 " "F t2 ca cc s(2"(2, Dch th8c ca cc "ng
3'0ng b " "ng *'ng Nt
Hnh &.1.1: M) hnh thit k m"ng DEF
Zc s(2"(2 cho php ngi >ng giao ti-p "8i nha', chia s thng tin "
cc @ng >Png% ZE d loi s(2"(2 l (nt(2p2is( " o2Dg2o'p% Bnt(2p2is( s(2"(2
c'ng c/p @ng >Png cho t/t c0 cc ngi >ng t2ong )ng, " >P nh )ail
s(2"(2 hay l Png cc cng ca thi-t bF cE thq >?n -n
h+ng hEc% ZE d >ng pan(l l ;ZZ ho2iontal c2ossJconn(ct " KZZ
kk
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
34/86
n tt nghip Nguyn Quc Bo T12-K46
"(2tical c2ossJconn(ct% ;ZZ >ng q D-t n5i gi#a cp ca thi-t bF tng S "8i
cc cng ca sitch% KZZ q D-t n5i gi#a UPng cng ngh6
ast Bth(2n(t "8i t5c N S|| bps% Ki6c thi-t D- bao g) c0 "i6c a 2a loi
cp c >ng t2ong tng thnh phn ca )ng cE thq >ng cp ng, cp
3'ang ho7c cp *oGn i%
H' th'Nc "o Dho0ng cch gi#a cc thi-t bF " y!' c' "A t5c N )
3'y-t Fnh "i6c >ng loi cp no cho hp lC% Hhc t- "i6c sI >ng cp XHu
cat l ph bi-n nh/t hi6n nay% 5i "8i )ng ng t2Pc bacDbon( thng
>ng cp 3'ang >o y!' c' "A l' lng " N an ton l8n%
Hnh &.1.&: c l@( trong thit k m"ng DEF
km
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
35/86
n tt nghip Nguyn Quc Bo T12-K46
6R Lfp 1
Hhi-t bF ch y-' sI >Png t2ong tng d l &x9 sitch% Mch th8c ca
cc "ng *'ng Nt collision >o)ain c 3'y-t Fnh bi cc thi-t bF tng d%
i cng ca )Nt thi-t bF tng d s l )Nt "ng *'ng Nt% 9h "y cc thi-t
bF tng d s chia nh+ cc "ng *'ng Nt%
H2!n S sitch cE thq cE cc cng "8i cc t5c N Dhc nha'% Zc cng
n5i "8i cc )y t2) cE t5c N l S|)bps, t2ong Dhi E cng n5i "8i 2o't(2 cE
l' lng l8n h.n n!n cE t5c N l S||)bps ho7c l S||bps "
S|||bps%
ng ch'ng S cng ca sitch%
=R Lfp 6
Zc thi-t bF tng k nh l 2o't(2 s chia nh+ cc "ng 3'0ng b
b2oa>cast >o)ain hay l chia nh+ cc )ng &x9% Zc )ng nh+ s giao
ti-p "8i nha' thng 3'a Fa ch tng k nh l Fa ch Uu%
Ki6c Fnh t'y-n gi#a cc )ng t2ong tng k c >a "o Fa ch tng
k, ph bi-n nh/t l Fa ch Uu " s'bn(t%
Ha 1 bi-t 2o't(2 ch'yqn cc gEi tin >a "o Fa ch ca ch, nE Dhng
cho cc gEi tin 3'0ng b ca )ng &x9 i 3'a% 9h "y )i cng ca 2o't(2
l )Nt "ng 3'0ng b " nE c=ng chnh l n.i ngOn ch7n cc thng tin 3'0ng
b ca )Nt )ng &x9 i 2a ngoi%
k
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
36/86
n tt nghip Nguyn Quc Bo T12-K46
Hnh &.1.*: c gGi tin ch"y trong DEF
Mhi cE S tin 3'0ng b t2ong )ng th t/t c0 cc )y t2ong )ng E q'
ph0i *I lC thng tin% q t2nh "i6c *I lC cc gEi tin Dhng cn thi-t chng ta
sI >Png K&x9 q chia nh+ cc b2oa>cast >o)ain% $y chnh l "i6c chia S
"ng *'ng Nt thnh cc "ng *'ng Nt nh+ h.n logical% Zc gEi tin 3'0ng
b s ch chy t2ong S K&x9 no E " ch cE cc )y th'Nc K&x9 E )8i
*I lC cc gEi tin ny%
kY
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
37/86
n tt nghip Nguyn Quc Bo T12-K46
CHONG 1( MX HNH %HN L% MKNG LAN
Ki6c thi-t D- )Nt )ng &x9 s >: >ng p @ng c cc y!' c' n-'
sI >Png ) hnh ph$n l8p ;i(2a2chical 9(to2D ist2ib'tion lay(2 " co2(
lay(2% xcc(ss lay(2 c'ng c/p s D-t n5i gi#a ngi >ng " )ng, >ist2ib'tionlay(2 0) b0o s li!n D-t gi#a cc thnh phn Dhc nha' t2ong )ng, co2(
lay(2 0) b0o "i6c t5i ' ho 3' t2nh >i ch'yqn cc gEi tin%
'R Lfp #Y,/ c"p
&8p t2'y cp xcc(ss lay(2 l iq) D-t n5i gi#a )y t2)
o2Dstations ho7c )y ch s(2"(2 "8i )ng% Hhi-t bF c sI >Png $y
cE thq l lay(2 d sitch cn g4i l &an sitch ho7c h'b hi6n nay h'b 1
Dhng cn c sI >Png 2Nng 21i%
H2ong l8p t2'y cp c=ng bao g) c0 "i6c Fnh t'y-n tng d%
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
38/86
n tt nghip Nguyn Quc Bo T12-K46
Hnh &.&.1: M) hnh (hCn l@( trong thit k m"ng DEF
9hi6) "P chnh ca acc(ss lay(2 l c'ng c/p D-t n5i gi#a ngi >ng
c'5i (n> 's(2 "8i )ng, >o E cc thi-t bF ca l8p ny cn 0) b0o y!' c'
gi thnh 2 " cE nhiA' cng% H' th(o y!' c' ca )ng ) sI >Png cc
loi thi-t bF ph hp%
0$ng &.&.1: Mt '! 2Ing ',itch cJ% i'co 'K 23ng trong l@( truy c(
ng sitch tng k hay l
k
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
39/86
n tt nghip Nguyn Quc Bo T12-K46
)'ltilay(2 sitch%Zc loi sitch ny bao g) ch@c nOng Fnh t'y-n ca c0
2o't(2 " li cE nhiA' cng nh sitch% Zc thi-t bF ny s chia )ng thnh
cc cng 3'0ng b b2oa>cast >o)ain% &8p ny c=ng thc hi6n cc nhi6) "P
nh Fnh t'y-n cho K&x9, thc hi6n cc chnh sch b0o )t i2(all, acc(ss
cont2ol lists% Nt s5 >ng sitch Zisco thng c >ng t2ong l8p ny l
>ng ||| a)ily " Y||| a)ily%
6R Lfp Ei2
9hi6) "P ch y-' ca l8p ny l ch'yqn cc gEi tin -n )ng ch "8i
t5c N cng nhanh cng t5t% Ki6c *I lC gEi tin Dhng >i:n 2a l8p ny ) s
>o l8p >8i 0) nhn% 9h "y cc thi-t bF ca l8p ny cn y!' c' t5c N
hot Nng cao%
Nt s5 >ng sitch Zisco c sI >Png t2ong l8p ny l >ng Y|| "|||%
kw
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
40/86
n tt nghip Nguyn Quc Bo T12-K46
CHONG 6( )HIV) DV MKNG 5AN
Mhc "8i )ng &x9 ch hot Nng t2ong )Nt ph) "F Fa lC t.ng 5i
nh+, )ng x9 i>( x2(a 9(to2D hot Nng t2ong ph) "i l8n h.n
nhiA'% Zhng ta cE thq coi x9 chnh l )ng >ng q D-t n5i cc )ng
&x9 "8i nha'% x9 >ng q D-t n5i gi#a cc chi nhnh ca )Nt t ch@c,
gi#a cc t ch@c "8i nha' ho7c l "8i cc >Fch "P b!n ngoi% H2ong )ng
x9 cE thq cE 2/t nhiA' >ng t2aic Dhc nha' i 3'a nh "oic(, >ata,
"i>(o
'R Cc bfc #h23# 43 !ng 5AN
Hhi-t D- )ng x9 c=ng c *() l )Nt nhi6) "P t.ng 5i DhE
DhOn% q cE c )Nt )ng x9 hot Nng hi6' 3'0 chng ta cE thq l)
th(o cc b8c sa'^
c Fnh cc )ng &x9 cn c D-t n5i% K )ng x9 cE nhi6)
"P D-t n5i cc )ng &x9 "8i nha' n!n "i6c *c Fnh c cc )ng cn D-t
n5i l 2/t 3'an t24ng% P nh )ng c
thi-t D- t2'yAn nhiA' "oic( " "i>(o th y!' c' ban>i>th l8n%
c Fnh topo )ng% i>th% Hhng 3'a ph$n tch t2aic cE thq *c
Fnh c ban>i>th cn thi-t ca ng t2'yAn " t $y *c Fnh cng
ngh6 s c sI >Png%
m|
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
41/86
n tt nghip Nguyn Quc Bo T12-K46
0$ng &.*.1: 0%n2,i2th cJ% mt '! c)ng ngh m"ng LEF
Zng ngh6 Lan>i>th&(as(> &in( Mhng gi8i hnUQPng% ;i6n nay cE 2/t nhiA' cng ngh6 )ng
x9 c sI >Png nh UQ Q(2"ic(s
&in(, %d, 2a)( (lay, xH xsynch2ono's H2ans(2 o>(, 'y nh/t, topo c g4i l
point to point% $y l )Nt >ng topo .n gi0n, >: thi-t lp nhng cE )Nt iq)
2/t hn ch- E l t2aic )'5n i t nt ny -n nt Dia cn ph0i 3'a t/t c0 cc
nt t2'ng gian, nh "y s g$y 2a N t2: t.ng 5i l8n%
mS
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
42/86
n tt nghip Nguyn Quc Bo T12-K46
Qta2 topology
Hnh &.*.&: M) hnh 't%r
q gi0) N t2: cE thq sI >Png topo ny% H2aic t S nt i -n S nt
Dhc ch ph0i 3'a nhiA' nh/t l S nt t2'ng gian% o't(2 "F t2 t2'ng t$) s
cn cE nhiA' cng " cn cE Dh0 nOngio >Pc t5t h.n cc 2o't(2 Dhc bi " nE
ph0i *I lC t/t c0 cc t2aic t2!n )ng%
(sh topology
Hnh &.*.*: M) hnh me'h
;ai >ng topo gi8i thi6' t2!n thng t c p >Png% hai >ng
t2!n, Dhi )Nt linD no E bF h+ng s >?n t8i "i6c )ng bF >on, nh/t l >ng
point to point% H2!n thc t- topo >ng )(sh thng c sI >Png nh/t% i
md
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
43/86
n tt nghip Nguyn Quc Bo T12-K46
2o't(2 cE t nh/t d ng linD t8i 2o't(2 Dhc% 9h "y Dhi cE S ng linD
no E g7p "/n A th )ng "?n hot Nng bnh thng%
6R M; hBnh ph?n Efp !ng 5AN
Z=ng gi5ng nh t2ong )ng &x9, ) hnh ph$n l8p c=ng c p>Png t2ong thi-t D- )ng x9%
Hnh &.*.-: M) hnh (hCn l@( trong thit k m"ng LEF
hnh ny bao g) k l8p^
Zo2( lay(2^ $y l l8p c'ng c/p cc ng t2'yAn t5c N cao gi#a ccsit( Dhc nha'% H2ong l8p ny Dhng n!n cE b/t D )Nt 3' t2nh *I lC gEi tin
no " >P nh >ng xZ&s% Ki6c ny cE thq l) ch) 3' t2nh ch'yqn cc
gEi tin, t@c l l) ch) 3' t2nh *I lC ca )ng%
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
44/86
n tt nghip Nguyn Quc Bo T12-K46
xcc(ss lay(2^ $y l n.i D-t n5i gi#a ngi >ng (n> 's(2s "8i)ng, hay chnh l n.i D-t n5i gi#a cc )ng &x9 "8i x9 bacDbon(s% l8p ny c=ng cE thq p >Png cc ph.ng php b0o )t nh xZ&s hay
pacD(tilt(2ing%
mm
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
45/86
n tt nghip Nguyn Quc Bo T12-K46
%HN 6( MS) T %HONG )HjC )kN CXNG CCQIPN %H% Q P MKNG
CHONG '( MS) T %HONG )HjC )kN CXNGCHl VU
'R Cc v:n `. ch,ng
9gy nay cng "8i s pht t2iqn )nh ) ca cng ngh6 thng tin, cc
) hnh )ng c=ng cE *' h8ng ngy cng c n$ng c/p q cE thq pht
t2iqn song hnh cng "8i nh#ng ti-n bN Dhng ngng ca nh#ng cng ngh6
)8i% 9hng s pht t2iqn ny c=ng )ang th(o nE 2/t nhiA' phiAn toi, bi
cng "8i s pht t2iqn "A cng ngh6 b0o )t th nh#ng D ph hoi t2!n )ng
c=ng Dhng ngng n$ng cao tay nghA ph hoi ca )nh, " D th't )
chng sI >Png ngy cng tinh "i, *0o 3'y6t h.n%
Zng ngh6 t/n cng ngy cng ph@c tp " " th- c=ng 2/t DhE cE bi6n
php h#' hi6' no cE thq ch5ng c hon ton nh#ng "/n A E% 9gy nay
cE 2/t nhiA' cch t/n cng c nh#ng D t/n cng t2!n )ng sI >Png nhnh#ng cng cP ph hoi ph bi-n q ph hoi thng tin t2!n )ng% 9hng >
cE nhiA' cch t/n cng -n )/y th cc cch ) nh#ng hacD(2 >ng q t/n
cng h6 th5ng A' >a t2!n nh#ng y-' t5 sa'^
H/n cng "o nh#ng )Pc ti!' ph bi-n nh#ng @ng >Png hay nh#ng
thnh phn )ng%
H/n cng bng hai ph.ng php thng >Png acti"( " passi"(%Zc cch thc hi6n "i6c t/n cng Dhc nh On t2N) passo2>, ph )t
)1, th't ton gi0i )1
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
46/86
n tt nghip Nguyn Quc Bo T12-K46
H/n cng bF Nng uassi"( attacDs
Lao g) cc cch t/n cng nh sniing, "'ln(2ability scanning
H/n cng uasso2> uasso2> attacDs
Lao g) cc cch t/n cng nh passo2> g'(ssing, b2't( o2c(, >ictiona2yJ
bas(> passo2> attacDs
H2!n $y l tng D-t nh#ng ph.ng php t/n cng )ng ph bi-n nh/t
hi6n nay ) ta thng g7p% q hiq' bi-t s$' h.n "A "/n A ny ta i nghi!n
c@' tng cch t/n cng )Nt%
1R ):n c;ng chm `7ng
d%S% uh.ng php t/n cng Fch "P ang hot Nng% uh.ng php
t/n cng ch Nng cE Dh'ynh h8ng 2/t 2{ 2ng, bi " nh#ng ng'y!n nh$ng$y 2a thi6t hi thng l nhn bi-t c% Nt t2ong nh#ng Diq' t/n cng ti!'
biq' cho >ng t/n cng ny E l Diq' t/n cng i6n "o t2'ng
t$) ca )ng nh) l) cho c. s h tng ca nh#ng >Fch "P )ng bF ph$n
tn% Miq' t/n cng ny thng Dhng ch t24ng -n "i6c Nt nhp "o h6
th5ng ) nE Fnh t/n cng, nE thng tc Nng l) gi0) ch/t lng c'ng c/p>Fch "P ca )ng, l) cho h6 th5ng Dhng cn Dh0 nOng ph$n ph5i >Fch "P
cho Dhch hng n#a% Hhng thng chng ta A' ngh 2ng )Pc ti!' t/n cng
ch y-' ca Fch "P @ng >Png t8i t/t c0 nh#ng Dhch
hng ca h6 th5ng )ng E% )4i Dhch hng A' sI >Png )i t2ng "t
lC hay nh#ng thc thq logic q li!n D-t "8i cc h6 th5ng )y tnh Dhc, nh#ng
mY
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
47/86
n tt nghip Nguyn Quc Bo T12-K46
)i t2ng li!n lc ny thng A' cE gi8i hn nh/t Fnh "A t2aic no E%
Mhi E D t/n cng s gIi t8i )ng li!n ti-p nh#ng gEi tin Dhi-n cho h6 th5ng,
hay s(2"(2 Dhng thq *I lC DFp nh#ng gEi tin E% $y c=ng chnh l ng'y!n
nh$n ) ta Dhng thq > on t28c c% Zch t/n cng ny cE thq g$y 2a
hi6n tng )ng bF t2(o, th) ch nE cn l) cho )ng bF sh't>on% Nt s5
lng l8n nh#ng "P t/n cng bi ng >Fch "P t8i nh#ng Dhch
hng cli(nt% Nt t2ong nh#ng >ng t/n cng ti!' biq' cho hnh th@c ny
c g4i l n(to2D ban>i>th% Nt s5 cc >oanh nghi6p cE "F t2 th'n li
" cE >0i thng > tha c=ng n!n A phng "8i loi hnh t/n cng ny "
chnh s > tha E li to c. hNi n0y sinh nh#ng t t/n cng Diq' ny% Q
tn ph ng'n ti ng'y!n )ng phn l8n l bGt ng'n t b!n ngoi )ng
nhng ta c=ng Dhng n!n loi b+ Dh0 nOng )nh s bF t/n cng t chnh b!n
t2ong )ng E%
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
48/86
n tt nghip Nguyn Quc Bo T12-K46
cng gIi )Nt lng l8n nh#ng gEi tin t8i )y tnh bF hi% ;nh th@c t/n cng
ny c g4i l hi6n tng l) t2n )ng loo>ing% ng bF t/n cng cE
thq bF t2n ngp bi cc gEi tin gIi t8i, >0i thng ca )ng s bF chi-) h-t "
>o E cc >Fnh "P Dhc )'5n chy t2!n h6 th5ng A' bF nhng t26, h6 th5ng
)ng coi nh t2 thnh t! li6t%
Nt cch ph h' h6 th5ng Dhc c=ng hay c sI >Png l nh "o s
c/' hnh )ng )Nt cch l+ng lo, hacD(2 s t) cch iA' Dhiqn t2aic ca D
bF hi, bng cch ny hacD(2 cE thq la bFp s Diq) sot ca )ng " >: >ng
l) cho )ng E bF t2n ngp% Miq' t/n cng )ng nh "y c g4i l t/n
cng "o @ng >Png xpplication attacDs%9hn ch'ng ng t/n cng )ng hot Nng t2ong )Nt ph)
"i 2/t 2Nng, " th- nE thng *'/t hi6n t2ong 2/t nhiA' hon c0nh Dhc nha'%
$y l )Nt >ng t/n cng nh) )Pc ch ph hoi nh#ng ti ng'y!n t2!n
)ng, l) gi0) Dh0 nOng D-t n5i ca h6 th5ng q hp php ho t cch sI
>Png ti ng'y!n )ng ca nh#ng D ph hoi, t E l) t! li6t h6 th5ng hay
h6 iA' hnh )ng%
d%d% uh.ng php t/n cng
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
49/86
n tt nghip Nguyn Quc Bo T12-K46
cng% ;ng t2O), th) ch cE thq l hng nghn o)bi(s cE thq c D-t np
"o c'Nc t/n cng ny bi nh#ng D hacD(2 ch'y!n cn% Lng cch sI >Png
nh#ng phn )A) 1 ci 7t t t28c q iA' Dhiqn, )i o)bi(s s c sI
>Png sao cho chnh b0n th$n nE s cE thq t/n cng "o )Pc ti!'% 9h#ng D-t
3'0 t/n cng bng o)bi(s s c tch l' li " nE l) cho )Nt lng l8n
t2aic t2!n )ng s bF 2ng cn ti ng'y!n " cc li!n lc s bF chng ch/t l!n
nha'%
d%k% H/n cng Qz9
L0n ch/t ca ph.ng php t/n cng Qz9 attacDs l >a "o nh#ng y-'
iq) ca giao th@c HZuvUu% uh.ng php ny li >Png 3' t2nh bGt tay ba
b8c kJay han>shaD( q l) cho thi-t bF ch gIi xZM "A cho Fa ch
ng'n " Dhng D-t thc 3' t2nh bGt tay c%
H28c h-t chng ta t) hiq' "A 3' t2nh bGt tay ba b8c%
Hnh *.1.1: u trnh Nt t%y * @c O*P ,%y h%n2'h%keQ
R' t2nh ny c bGt ' Dhi )Nt host gIi i )Nt gEi Qz9synch2oniation% H2ong gEi syn ny s cE Fa ch Uu ca ng'n " ch, nE s
mw
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
50/86
n tt nghip Nguyn Quc Bo T12-K46
gip )y ch gIi gEi tin Qz9vxZM cho )y ng'n% Mhi )y ng'n nhn
c gEi tin ny nE s gIi gEi tin xZM *c nhn thi-t lp D-t n5i%
H2ong Diq' t/n cng Qz9, hacD(2 s gIi nh#ng gEi tin Qz9 nhng gi0
)o Fa ch Uu ng'n% Mhi E )y nhn s t20 li cho )Nt Fa ch Uu Dhng
tn ti, Dhng -n c " ch nhn xZM t )y E% H2ong t2ng thi ch
nh "y, y!' c' thi-t lp D-t n5i c l' t2ong hng i ho7c t2ong bN nh8%
H2ong s'5t t2ng thi ch, h6 th5ng bF t/n cng s ph0i >nh hn )Nt phn ti
ng'y!n cho -n Dhi thi gian ch h-t hn%
Hinh *.1.&: 6RF %tt%ck
K8i 2/t nhiA' gEi tin Qz9 gIi i, hacD(2 s l) t2n ngp thi-t bF Dhi-n
cho thi-t bF ny bF t2n ngp ti ng'y!n Dhi t20 li " ch cc D-t n5i gi0 to
" nE Dhng cn Dh0 nOng t20 li cho cc y!' c' D-t n5i tht Dhc%
q ch5ng li ph.ng php ny cE thq >ng cch gi0) thi gian ch cho
)Nt D-t n5i " tOng Dch th8c hng i l!n% H'y nhi!n $y ch l cch bF
|
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
51/86
n tt nghip Nguyn Quc Bo T12-K46
Nng q gi0i 3'y-t% uh.ng php t5t nh/t l >ng cc h6 th5ng c0nh bo "
pht hi6n >/' hi6' ca cc t t/n cng ny q ngOn ch7n t t28c%
6R ):n c;ng b `7ng
uh.ng php t/n cng ny t2i ngc "8i Diq' t/n cng ch Nng%
H2ong s'5t 3' t2nh t/n cng, D t/n cng Dhng Dhng t2c ti-p l) 0nh
hng -n )ng bF hi%
k%S% Qniing
Qniing cE ngha l s ngh( t2N) thng tin t2!n )ng% Qni(2 l )Nt
tool cE Dh0 nOng gip cc thi-t bF nhn th/y t/t c0 cc gEi tin ) chng i 3'a%
$y l )Nt cng cP 2/t )nh q ch'n on c nh#ng "/n A ca )ng,
nhng nE c=ng cE thq c >ng "o nh#ng )Pc ch */' nh >ng q t)
passo2> ()ail hay b/t c@ )Nt >ng ># li6' no c gIi i >8i >ng t(*t%
k%d% K'ln(2ability scanning
$y l ph.ng php t/n cng 3't t) iq) y-' ca h6 th5ng% 9E ch
>?n " t) ch y-' ca h6 th5ng q D t/n cng t) c c. hNi *$) nhp
"o )ng%
=R ):n c;ng p-88\Y@
Miq' t/n cng passo2> 2/t ph bi-n hi6n nay% $y c=ng l Diq' t/n
cng 2/t >: thc hi6n " cho D-t 3'0 t.ng 5i cao% ZE hai >ng t/n cng ph
bi-n l b2't( o2c( " >ictiona2yJbas(> attacD%
m%S% L2't( o2c( attacDs
$y c hiq' )Nt cch .n gi0n l s D-t hp ca 2/t nhiA' Diq' ph
passo2>% Hhng thng chiA' >i ca passo2> l t m -n SY D t, ng
thi c=ng cE Dho0ng S|| D t c >ng q 7t passo2>, nh "y s cE
Dho0ng S||m-n S||SYt hp passo2> c to 2a% $y c=ng l )Nt ng'y!n
S
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
52/86
n tt nghip Nguyn Quc Bo T12-K46
nh$n cE thq >?n t8i "i6c passo2> cE thq bF t/n cng bng L2't( o2c(
xattacDs% 7c iq) t/n cng ca ph.ng php ny l) cho ngi ta 3'an t$)
-n "i6c tOng t hp )1 ho passo2>%
m%d% attacDs
$y l ph.ng php t/n cng passo2> .n gi0n nh/t% 9E >a "o )Nt
>anh sch tp hp y nh#ng Dh0 nOng thng thng ngi to 2a
passo2> hay sI >Png nh nh#ng c$' nEi, nh#ng Fa >anh, nh#ng t ng#
)ang tnh 2i!ng t hay nh#ng biq' tng 7c bi6t% Lng cch cho chy list
ny q t) Di-) s t2ng l7p, D t/n cng i Dhi c=ng t) c passo2> q
phPc "P cho )Pc ch ca )nh%
d
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
53/86
n tt nghip Nguyn Quc Bo T12-K46
CHONG 1( MS) T QIPN %H% Q P MKNG
phn t28c ta 1 A cp -n )Nt s5 ph.ng php t/n cng )ng ch
y-' hi6n nay% H2ong phn ny ta s *() *t cc bi6n php ch5ng li s t/n
cng E thng 3'a "i6c ph$n tch nh#ng ch@c nOng b0o "6 ># li6' ca )Nt s5
thi-t bF )ng thng >Png "?n thng c sI >ng t2ong cc ) hnh )ng
q a 2a nh#ng ph.ng h8ng DhGc phPc c=ng nh bi6n php b0o "6 )Nt
cch thch hp nh/t%
'R T\2#chQitch l thi-t bF hot Nng t2!n tng d ca ) hnh QU ng 2Nng 21i t2!n h' h-t cc ) hnh h6
th5ng )ng% i cng ca sitch l )Nt "ng *'ng Nt collision >o)ain
n!n s t2nh c Png >N Dhi )i cng gIi thng tin i% sitch bOng thng
c=ng Dhng bF chia s nh ;'b% H/t c0 cc cng ca sitch n) t2ong S
"ng 3'0ng b b2oa>cast >o)ain, t@c l Dhi cE S gEi tin )ang Fa chb2oa>cast tng k -n sitch th t/t c0 cc )y tnh n5i "o cc cng ca
sitch A' ph0i *I lC gEi tin E% Zc gEi tin gIi gi#a cc )y tnh t2ong cng
)ng &x9 s c sitch Fnh t'y-n >a t2!n Fa ch xZ (>ia xcc(ss
Zont2ol% H2!n )i sitch cE )Nt b0ng Fa ch xZ c g4i l b0ng Zx
Zont(nt x>>2(ssabl( ()o2y, >a "o b0ng ny ) sitch ch'yqn cc gEi
tin -n ng cng ch% i ca2> )ng cE )Nt Fa ch xZ >'y nh/t o E)i uZ s ch t.ng @ng "8i S Fa ch xZ >'y nh/t t2ong b0ng Zx%
S%S% uasso2> t2'y cp " po2t s(2c'2ity
Mhi cc cng ca sitch Dhng cE bi6n php b0o "6, b/t D ngi no
"8i S )y tnh *ch tay A' cE thq D-t n5i "o )ng " cE thq sI >Png ti
ng'y!n ca )ng% Nt t2ong nh#ng cch ngOn ch7n "i6c ny E l thi-t lp
k
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
54/86
n tt nghip Nguyn Quc Bo T12-K46
Qtatic xZ x>>2(ss% H@c l gGn cho )i cng ca sitch t.ng @ng "8i S
Fa ch xZ *c Fnh% Mhi E ch cE >'y nh/t )y tnh cE Fa ch xZ nh
th- )8i sI >Png c cng ny% Ha cE thq c/' hnh static xZ a>>2(ss th(o
cc c$' l6nh sa'^
6,itchSconTig termin%l
6,itchOconTigQSm%cP%22re''Pt%le 't%tic UU1U.8%VU.1WX& interT%ce T%U/? vl%n
DEF1
Qa' c$' l6nh ny Fa ch xZ ||S|%aY|%Swd s c gGn "o cng s5 ca sitch%
Ki6c 7t static xZ a>>2(ss i Dhi g$y 2a li >o Fa ch xZ Dhng
chnh *c " )/t cng *c Fnh Fa ch xZ ca tng )y tnh% K/n A ny
s c gi0i 3'y-t bng "i6c c/' hnh po2t s(2c'2ity t2!n sitch% Fa ch xZ
' ti!n ) sitch h4c c t cng c c/' hnh s c l/y% 9goi 2a
chng ta cE thq c/' hnh c s5 Fa ch xZ t5i a s c gGn cho S cng%
6,itchOconTigQSinterT%ce T%U/?
6,itchOconTigPiTQS(ort 'ercurity
6,itchOconTigPiTQS(ort 'ercurity m%YPm%cPcount 1U
6,itchOconTigPiTQS(ort 'ercurity %ction 'hut2o,nZtr%(
$y 1 c/' hnh po2t s(2c'2ity cho cng s5 ca sitch% Q5 S| cE C
ngha l cE t5i a S| Fa ch xZ c gn cho po2t ny% H2ong >ng l6nh
c'5i cng, n-' sa' action l t2ap th Dhi cE *$) nhp b/t hp php "o po2t
s(2c'2ity th sitch s bo cho ngi 3'0n t2F bi-t, cn n-' l sh't>on th
po2t ny s t Nng t2(o Dhng hot Nng n#a%
Mhi cE thay i t2ong )ng nh l "i6c th!), thay i ho7c b+ cc )y
tnh i th cn c/' hnh li " b+ c/' hnh c= i%
m
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
55/86
n tt nghip Nguyn Quc Bo T12-K46
Ki6c 7t cc passo2> t2'y cp c=ng phn no ch5ng li c s t2'y
cp b/t hp php q iA' Dhiqn sitch% Zhng ta cE thq 7t passo2> cho
cng consol, cho cc phi!n t(ln(t
6,itchOconTigQSline conTigur%tion U
6,itchOconTigPlineQS(%'',or2 %chkho%
6,itchOconTigPlineQSlogin
6,itchOconTigPlineQSline vty U -
6,itchOconTigPlineQS(%'',or2 %chkho%6,itchOconTigPlineQSlogin
Zc c$' l6nh t2!n 1 7t passo2> cho cng consol " cc phi!n t(ln(t
l bachDhoa% '5n sI >Png th cn ph0i nhp ng passo2> ny%
S%d% K&x9
Zc ph.ng php "a t2nh by ch 0) b0o an ton ># li6' cho thng
tin i 3'a sitch )Nt cch 2/t .n gi0n% q n$ng cao tnh b0o )t Dhi >ng
sitch ta cE thq c/' hnh K&x9 Ki2t'al &x9 t2!n sitch% Hhc ch/t $y l
"i6c chia )ng &x9 thnh cc )ng &x9 nh+ h.n t2!n cng S sitch%
iA' ny 2/t h#' ch cho cng "i6c b0o )t nh/t l 5i "8i cc >oanh
nghi6p cE nhiA' phng ban hot Nng Nc lp% 5i "8i )i phng ban Dhc
nha' ta s lp thnh cc K&x9 Dhc nha'% Ki6c chia nh+ )ng &x9 thnh
cc K&x9 s l) tOng bOng thng >o cc "ng b2oa>cast c chia nh+ >o
E l) tOng t5c N t2'yAn ># li6'%
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
56/86
n tt nghip Nguyn Quc Bo T12-K46
Hnh *.&.1: M) hnh tri[n kh%i DEF
Mhi 1 c/' hnh K&x9 cho )ng &x9 th n-' nh )Nt K&x9 bF t/n
cng nE s Dhng g$y 0nh hng t8i K&x9 Dhc " )i K&x9 l )Nt "ng
b2oa>cast >o)ain 2i!ng bi6t%
Ki6c to 2a cc K&x9 c thc hi6n bi cc l6nh sa'^
6,itchSvl%n 2%t%%'e
6,itchOvl%nQSvl%n & m%rketing
6,itchOvl%nQSeYit
Qa' cc c$' l6nh t2!n K&x9d c to 2a " nE cE t!n l )a2D(ting% t2ng thi >(a'lt, t/t c0 cc po2t ca sitch c gn "o K&x9S " K&x9S
g4i l "lan 3'0n lC, nE Dhng thq *o i c%
Qa' Dhi to 2a cc K&x9 th cc po2t ln lt c gn "o cc K&x9
t.ng @ng^
6,itchOconTigQSinterT%ce T%U/?6,itchOconTigPiTQS',itch(ort mo2e %cce''
Y
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
57/86
n tt nghip Nguyn Quc Bo T12-K46
6,itchOconTigPiTQS',itch(ort %cce'' vl%n &
Zng s5 c c/' hnh l cng t2'y cp " c gn "o K&x9d%
ng n5i gi#a cc sitch )ang thng tin ca t/t c0 cc K&x9, >o E
cc cng d ' cn c c/' hnh )o>( t2'nD%
6,itch1OconTigQSinterT%ce gig%it U
6,itch1OconTigPiTQS',itch(ort mo2e trunk
Zc po2t ny t.ng 5i 3'an t24ng n!n cn c ch C b0o "6% 9goi 2a
K&x9S c=ng cn c b0o "6 " $y c coi l K&x9 3'0n lC, t/t c0 ccthng tin ca cc giao th@c hot Nng t2ong K&x9 nh KHuJK&x9
H2'nDing u2otocol A' c gIi t2!n K&x9S, iA' 3'an t24ng n#a l Fa ch
Uu gn cho sitch q 3'0n lC c=ng t2!n K&x9S%
KHu^
Lnh thng "i6c c/' hnh K&x9 ch c t2iqn Dhai t2!n S sitch,"i6c ) 2Nng 2a l )Nt cng "i6c t.ng 5i ph@c tp% K&x9 t2'nDing c
to 2a q gi0i 3'y-t "/n A ny% K&x9 t2'nDing cho php to nhiA' K&x9
*'y!n s'5t h6 th5ng bng cch >n nh1n 7c bi6t cho 2a)( q *c Fnh *()
2a)( E th'Nc K&x9 no%
Hnh *.&.&: DEF trunk
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
58/86
n tt nghip Nguyn Quc Bo T12-K46
9h hnh t2!n, gi0 sI t2!n )i sitch t2iqn Dhai d K&x9, Dhi E )'5n
D-t n5i cc K&x9 ny "8i nha' ta cn d ng ni gi#a cc sitch% 9h "y
n-' cE n K&x9 th ta s cn n ng n5i >?n t8i 2/t t5n ti ng'y!n ng thi
g$y DhE DhOn cho "i6c c/' hnh% 9-' ng n5i gi#a d sitch c c/' hnh
t2'nD th ng E s )ang thng tin ca t/t c0 cc K&x9, ng E s
t.ng .ng "8i t/t c0 cc ng t2!n%
]iao th@c K&x9 H2'nDing KHu c a 2a q gi0i 3'y-t cc "/n A
"A hot Nng t2ong )ng ch'yqn )ch cE K&x9% K8i KHu c/' hnh K&x9
c th5ng nh/t t2ong )Nt )iAn 3'0n t2F% ;.n n#a KHu c=ng gip cho cng"i6c 3'0n lC " th(o >{i )ng K&x9 t2 n!n .n gi0n h.n% Nt )iAn KHu l
tp hp t/t c0 cc thi-t bF D-t n5i "8i nha' cE cng t!n )iAn% Mhi gIi thng
i6p KHu cho cc sith Dhc t2ong )ng, thng i6p KHu c Eng gEi
bng giao th@c t2'nDing l UQ& ho7c UBBB |d%SR% ch- N )7c Fnh c@
pht )Nt ln cc b0n tin cp nht KHu s c gIi i% Mhi cE s thay i no
E ngay lp t@c s(2"(2 s gIi thng tin thay i%KHu sitch cE thq hot Nng )Nt t2ong ba ch- N sa'^
Q(2"(2
Zli(nt
H2anspa2(nt
9-' sitch c c/' hnh )@c s(2"(2, ta cE thq l) c cc "i6c sa'^
Ho )8i K&x9
Zhnh sIa cc K&x9
o cc K&x9 th(o C )'5n
&' c/' hnh K&x9 t2ong 9Kx ca nE
]Ii cc thng i6p KHu 2a t/t c0 cc po2t t2'nD ca nE
9-' sitch c c/' hnh l )o>( cli(nt, nE Dhng thq to, chnh sIa
" *o cc K&x9% 9E ch cE thq l) c cc cng "i6c sa'^
p @ng )4i s thay i t s(2"(2
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
59/86
n tt nghip Nguyn Quc Bo T12-K46
]Ii cc thng tin KHu 2a cc po2t t2'nD
Qitch ch- N H2anspa2(nt s ch'yqn ti-p cc thng tin KHu ) nE
nhn c nhng nE Dhng 3'an t$) -n nNi >'ng ca cc thng i6p ny%
H2anspa2(nt sitch nhn c thng tin cp nht KHu t s(2"(2 nE c=ng
Dhng cp nht "o c. s ># li6', ng thi n-' c/' hnh K&x9 ca nE thay
i th nE c=ng Dhng gIi thng bo -n cc sitch Dhc% )o>( t2anspa2(nt
cE thq to, chnh sIa " *o cc K&x9 nhng nE ch )ang tnh ch/t Fa
ph.ng, t@c l ch cE tc >Png t2!n chnh b0n th$n nE%
Mhi c/' hnh K&x9 t2!n cc sitch ta n!n a "o )Nt t!n )iAn " la
ch4n cc sitch @ng "8i tng )o>( sao cho th'n ti6n cho cng "i6c 3'0n lC" b0o )t%
Nt s5 c$' l6nh c/' hnh KHu cho sitch^
6,itchSvl%n 2%t%%'e
6,itchOvl%nQSvt( 2om%in %chkho%
6,itchOvl%nQSvt( 'erverZclientZtr%n'(%rent6,itchOvl%nQSvt( (%'',or2 2ientu
1R ^,#ZY
o't(2 l thi-t bF hot Nng t2!n tng k ca ) hnh QU% 9hi6) "P ch
y-' ca 2o't(2 l Fnh t'y-n cc gEi tin " iA' Dhiqn s li!n D-t gi#a cc
K&x9% i cng ca 2o't(2 l S "ng b2oa>cast >o)ain, >o E 2o't(2 s chia
nh+ cc "ng b2oa>cast >o)ain% 9goi 2a tnh nOng 3'an t24ng nh/t ca
2o't(2 l nE cE Dh0 nOng ch4n con ng t5i ' q cho gEi tin i t8i ch%
o't(2 c >ng t2ong 2/t nhiA' loi hnh )ng nh UQo cao, nh 2o't(2 ca Zisco cE thq
c >ng nh )Nt i2(all thc thP, iA' ny 2/t th'n ti6n cho ngi sI
>Png%
w
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
60/86
n tt nghip Nguyn Quc Bo T12-K46
d%S% uasso2> t2'y cp
o't(2 cE d )o>( q t2'y cp "o nE, E l 's(2 )o>( " p2i"il(g(>
)o>(% o>( 's(2 l )o>( ' ti!n Dhi D-t n5i "8i 2o't(2% H2'y cp "o )o>(
's(2 ch cE thq Diq) t2a cc D-t n5i " *() thng tin >8i >ng cc b0ng
th5ng D! ch@ Dhng cE 3'yAn thay i c/' hnh thi-t bF, " th- s *$) nhp
t2i php )@c ny Dhng )/y ng'y hiq)% H2ong )@c p2i"il(g(> cE thq thay
i c/' hnh, th) ch cn cE thq *o b+ c/' hnh, 7t li passo2> )8i% !
0) b0o an ton, chng ta cE thq 7t passo2> cho cc )@c ny bng cc
l6nh sa'^
&6nh 7t passo2> cho )@c p2i"il(g(>, $y passo2> s lbachDhoa
\outerOconTigQSen%le (%'',or2 %chkho%
uasso2> ny s cE >ng cl(a2 t(*t% q )1 ho passo2> chng ta >ng
l6nh
\outerOconTigQSen%le 'ecret %chkho%
&6nh 7t passo2> cho cng consol " t(ln(t\outerOconTigQSline con'ol U
\outerOconTigPlineQS(%'',or2 %chkho%
\outerOconTigPlineQSlogin
\outerOconTigPlineQSline vty U 1?
\outerOconTigPlineQS(%'',or2 %chkho%
\outerOconTigPlineQSlogin
q 0) b0o tnh an ton cho thi-t bF c=ng nh h6 th5ng, n!n loi b+ t/t
c0 cc >Fch "P ) ta Dhng sI >Png, hay nh#ng >Fch "P s to l hng cho
nh#ng D t/n cng li >Png *$) nhp "o thi-t bF% H2!n 2o't(2 cE )Nt s5 >Fch
"P l'n )7c Fnh c sI >Png% H2!n 2o't(2 Zisco l'n chy giao th@c Z
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
61/86
n tt nghip Nguyn Quc Bo T12-K46
"8i cc thi-t bF Dhc q a 2a ph.ng php 3'0n lC thch hp% $y l giao
th@c gip 2/t nhiA' cho "i6c c/' hnh c=ng nh sIa ch#a li *0y 2a t2!n
2o't(2, >o E n-' D t/n cng "o c thi-t bF th $y c=ng l )Nt cng cP 2/t
h#' ch 5i "8i chng% q ngng hot Nng ca Z0i %Y%|%|vSY A' c i "o
cng a|v|, ng thi t/t c0 cc Fa ch t2ong >0i %%|%|vSY A' Dhng c i
"o cng a|v| ca 2o't(2%
9goi 2a c=ng cE thq c/' hnh xZ&s q ch/p nhn hay t ch5i "i6c sI
>Png )Nt >Fch "P ca )Nt Fa ch )ng no E (*t(n>(> xZ&s
\outerOconTigQS%cce''Pli't 1U1 (ermit tc( 18&.1V.-.U U.U.U.&?? %ny e] telnet
\outerOconTigQS%cce''Pli't 1U1 2eny tc( 18&.1V.-.U U.U.U.&?? 18&.1V.*.U
U.U.U.&?? e] &U
YS
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
62/86
n tt nghip Nguyn Quc Bo T12-K46
\outerOconTigQS%cce''Pli't 1U1 2eny tc( 18&.1V.-.U U.U.U.&?? 18&.1V.*.U
U.U.U.&?? e] &1
\outerOconTigQS%cce''Pli't 1U1 (ermit i( %ny %ny
>ng ' ti!n xZ&s cho php )ng Sd%SY%m%| thc hi6n t(ln(t -n
b/t c@ )ng no Dhc% Png s'bn(t )asD ) sI >Png il>ca2> )asD%Nt cch .n gi0n, chng ta cE thq hiq' il>ca2> ngc li "8i s'bn(t% K >P
s'bn(t )asD l d%d%|%| th il>ca2> )asD t.ng @ng "8i nE s l
|%|%d%d%
xZ&s c c/' hnh t2!n 2o't(2 l) cho nE cE ch@c nOng nh l )Nt
i2(all% Hhng thng cc 2o't(2 "F t2 t2'ng gian gi#a )ng b!n t2ong "
)ng b!n ngoi s c c/' hnh, nE s cch ly ton bN h6 th5ng )ng b!n
t2ong t2nh bF t/n cng% 9goi 2a c=ng cE thq c/' hnh xZ&s t2!n cc 2o't(2
t2'ng gian D-t n5i hai phn ca h6 th5ng )ng q Diq) sot l' lng 3'a li
gi#a hai phn ny%
Hhng 3'a cch c/' hnh 2o't(2 ta cE thq ngOn ch7n c s t/n cng
ca ph.ng php
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
63/86
n tt nghip Nguyn Quc Bo T12-K46
*c 5i "8i 2o't(2 ta cE thq sI >Png cc giao th@c Fnh t'y-n Nng nh Uu,
U]u, BU]u, Qu% $y l cc giao th@c 0) b0o "i6c Fnh t'y-n cc gEi
tin )Nt cch nhanh nh/t li 0) b0o tnh *c thc ca thng tin gIi " nhn%
k% Hng lIa
Hng lIa i2(all l )Nt )y tnh hay )Nt thnh phn ca )ng
n) gi#a ngi >ng " th- gi8i b!n ngoi nh) b0o "6 )ng b!n t2ong
t2nh Dh+i s t/n cng t b!n ngoi% Mhi c c/' hnh q hot Nng, i2(all
ngOn c0n nh#ng c'Nc t2'y cp b/t hp php t b!n ngoi "o )ng nNi bN,
ngOn ch7n nh#ng ngi sI >Png b!n t2ong cc )ng t28c nh#ng ng'y hiq)
tiA) tng t nh#ng )ng b!n ngoi " t cc cng po2t%
$y chng ta A cp -n k cng ngh6 i2(all, E l^
uacD(t ilt(2ing
xpplication lay(2 ]at(ays
Qtat('l insp(ction
9h#ng cng ngh6 ny cE thq l hp lC ho7c cE )7t cha thc s ph
hp nhng $y chng ta ch tp t2'ng nghi!n c@' Dh0 nOng ca chng "
c/' hnh nh th- no% uacD(t ilt(2ing i2(all l) "i6c tng n(to2D ca
) hnh QU% 9E c thi-t D- q iA' chnh nhanh chEng 3' t2nh cho php
ho7c h' b+ cc gEi tin i 3'a% xpplication lay(2 gat(ay c thi-t D- hot
Nng tng xpplication% 9E c thi-t D- q ph$n tch tng gEi tin i 3'a
ng thi *c Fnh *() Diq' ># li6' ca gEi tin E cE t2'yAn cE hp l6 hay
Dhng hay E l @ng >Png 7c bi6t l) hi 3' t2nh t2'yAn tin% Qtat('l
insp(ction i2(all >ng q Diq) t2a tng gEi tin " *c )inh *() E cE ph0i
l nh#ng gEi tin c t2ng i t2ong phi!n t2'yAn thng tin hi6n ti hay
Dhng% $y l Diq' i2(all >ng t2ong tng n(to2D, nhng nE c=ng cE thq
hot Nng ti cc tng t2anspo2t, s(ssion, p2(s(ntation " application%
Yk
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
64/86
n tt nghip Nguyn Quc Bo T12-K46
k%S% uacD(t ilt(2ing i2(all
uacD(t ilt(2ing i2(all c c/' hnh q cho php hay ngOn c/) 3'
t2nh t2'y cp ca cc po2t hay Fa ch Uu cP thq no E% ZE hai cch gi0i 3'y-t
Dhi thi-t lp hot Nng ca uacD(t ilt(2ing i2(all, E l allo by >(a'lt
" >(ny by >(a'lt% xllo by >(a'lt cho php t/t c0 cc t2aic i 3'a
loi t2 nh#ng t2aic 7c bi6t 1 bF ngOn c/)% (a'l ngOn ch7n t/t
c0 cc t2aic i 3'a t2 nh#ng t2aic 2{ 2ng 1 c cho php% H2!n thc t-,
>(ny by >(a'lt c sI >Png 2Nng 21i bi " chng ta ch cn cho nh#ng
t2aic cn thi-t i 3'a, nh#ng po2t l cn c ngOn ch7n q t2nh "i6c *$)
nhp ca D ph hoi%uacD(t ilt(2ing i2(all cE nh#ng )7t li nhng c=ng cE nhiA' )7t hn
ch-% Zi li ' ti!n ca nE l t5c N *I lC% Mhi cc gEi tin i 3'a, ch cE phn
h(a>(2 l c Diq) t2a " cc 3'y tGc Diq) t2a c=ng 2/t .n gi0n n!n t5c N
*I lC l 2/t cao% 9goi 2a, uacD(t ilt(2ing i2(all c=ng 2/t >: >ng sI >Png%
Ki6c thi-t lp c/' hnh cho nE l t.ng 5i >: >ng " "i6c Eng hay ) cc
po2t c=ng c thc hi6n )Nt cch nhanh chEng% Nt ' iq) ca uacD(tilt(2ing i2(all l nE cE tnh t2ong s'5t 5i "8i cc thi-t bF )ng% Zc gEi tin
cE thq i 3'a nE ) Dhng ph0i gIi hay nhn th!) b/t D )Nt phn thng tin
no c0% 9gy nay h' h-t cc 2o't(2 A' cE ch@c nOng nh l )Nt uacD(t
ilt(2ing i2(all% Ki6c ny cE thq thc hi6n nh c/' hnh xZ&s t2!n cc cng
ca 2o't(2%
uacD(t ilt(2ing i2(all ch Diq) t2a phn h(a>(2 ch@ Dhng Diq) t2anNi >'ng ca gEi tin% $y chnh l ngi n cho s ph hoi t b!n t2ong, Dhi
) cc gEi tin cE h(a>(2 hp php 1 c i2(all cho i 3'a )Nt cch >:
>ng%
k%d% xpplication lay(2 ]at(ays
$y cn c g4i l xpllication ilt(2ing% 9E cE nhiA' tnh nOng ni
t2Ni h.n so "8i uacD(t ilt(2ing i2(all% xpplication lay(2 ]at(ays Diq) t2a
Ym
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
65/86
n tt nghip Nguyn Quc Bo T12-K46
ton bN gEi tin " "i6c l4c b+ gEi tin c >a t2!n cc 3'y l't 7c t2ng,
2nh )ch h.n%
Hnh *.&.*: E((lic%tion D%yer ^%te,%y
$y, 2o't(2 D-t n5i 2a Unt(2n(t hay cn g4i l (*t(2io2 2o't(2J2o't(2ngoi "i s a t/t c0 cc t2aic nhn "o -n application gat(ay% Zc
2o't(2 b!n t2ong int(2io2 2o't(2 s ch nhn cc gEi tin c ch'yqn t
application gat(ay% 9h "y l application gat(ay cE Dh0 nOng Diq) sot
"i6c ph$n ph5i ca cc >Fch "P )ng i 2a hay i "o h6 th5ng )ng% Mhi E
ch nh#ng 's(2 no c cho php )8i cE thq D-t n5i 2a Unt(2n(t ho7c l ch
nh#ng @ng >Png no c php )8i cE thq thi-t lp D-t n5i "8i host b!nt2ong%
xpplication lay(2 ]at(ays sI >Png cc 3'y tGc ph@c tp h.n uacD(t
ilt(2ing q *c Fnh tnh hp l6 ca cc gEi tin )'5n i 3'a nE, >o E tOng
tnh an ton cho h6 th5ng% H'y nhi!n chnh iA' ny li to 2a s hn ch- ca
cng ngh6 ny% H/t c0 cc gEi tin i 3'a nE A' bF tho 2i 2a, >a t2!n cc
3'y l't ph@c tp q Diq) t2a ton bN gEi tin nh) *c Fnh tnh *c thc ca
gEi tin, >o E t5c N *I lC l th/p h.n nhiA' so "8i uacD(t ilt(2ing%
Y
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
66/86
n tt nghip Nguyn Quc Bo T12-K46
k%k% Qtat('l insp(ction
$y l cng ngh6 D-t hp gi#a d cng ngh6 nEi t2!n% 9E t) cch DhGc
phPc nh#ng nhc iq) cn li ca uacD(t ilt(2ing " xpplication lay(2
]at(ays% Qtat('l insp(ction c'ng c/p s nhn bi-t l8p @ng >Png cho
i2(all nhng li Dhng ph0i tho 2i gEi tin% 9h "y Qtat('l insp(ction
hot Nng nhanh h.n xpplication lay(2 ]at(ays " cE Dh0 nOng b0o )t cao
h.n uacD(t ilt(2ing%
k%m% Nt s5 ) hnh )ng c t2iqn Dhai bng i2(all
Hnh *.&.-: M) hnh tri[n kh%i Tire,%ll
Hhng thng cc i2(all c 7t ti "F t2 ng bi!n, gi#a )ng
b!n t2ong " th- gi8i b!n ngoi% Hi "F t2 ny, i2(all cE thq Diq) sot cc
t2aic t b!n t2ong i 2a c=ng nh t b!n ngoi i "o%
YY
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
67/86
n tt nghip Nguyn Quc Bo T12-K46
Hnh *.&.?: M) hnh tri[n kh%i kt h_( Tire,%ll nhiu t9ng
q tOng N an ton cho h6 th5ng, chng ta cE thq tOng tnh ch/t b0o "6
ca i2(all bng cch sI >Png ) hnh i2(all nhiA' tng q chng b *'ng
" ph5i D-t hp "8i nha'% Lng cch ny chng ta "a tOng tnh b0o )t cho
)ng "a hn ch- c cc y-' iq) ca i2(all% Hhng 3'a "i6c c/' hnh
i2(all ph hp "8i tng >ng i2(all sI >Png " tnh ch/t cc >Fch "P )
i2(all E b0o "6 ) ta cE )Nt h6 th5ng cE ch/t l.ng t5t h.n% 9h#ng phn
3'an t24ng " )ang tnh ch/t 3'y-t Fnh th n!n 7t pha t2ong ca h6 th5ng
" Dhi E )'5n t2'y cp "o cc phn ny ph0i i 3'a nhiA' l8p i2(all, nh
th- N an ton s tOng l!n%
Y
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
68/86
n tt nghip Nguyn Quc Bo T12-K46
=R )h23# b ph# h2 on c
nh#ng )5i ng'y hiq), nhn >ng nh#ng >/' hi6' t/n cng, 4c " hiq' cc
thng bo ca cc thi-t bF Dhc% 9h#ng hn ch- ca cc thi-t bF ny c gi0i
3'y-t bng thi-t bF pht hi6n *$) nhp h6 th5ng Unst2'sion 'ng cc thng bo log il(s c gIi i t cc
thi-t bF t2!n )ng Dhc nh 2o't(2, sitch, i2(all, s(2"(2 q t E a 2a
ph.ng h8ng gi0i 3'y-t nhG) 0) b0o an ton thng tin cho )ng% ;.n th-
n#a, U# li6' l' t2# thng tin "A cc >ng t/n cng, "
th- nE cE Dh0 nOng so snh, 5i chi-' tnh hnh t2aic hi6n ti ca )ng qpht hi6n 2a nh#ng >/' hi6' */' 5i "8i )ng cE thq *0y 2a >o E cE thq hn
ch- -n )@c t5i a s 0nh hng ca nE t8i )ng E%
9goi nh#ng tnh nOng nh gi) st " pht hi6n, Ung phn )A)hay l s D-t hp gi#a phn c@ng " phn )A)%
ZE k loi U
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
69/86
n tt nghip Nguyn Quc Bo T12-K46
m%S% 9(to2DJbas(> Ui6n 2Nng, ti
nh#ng "F t2 3'an t24ng ca )ng, hay l t28c cc thi-t bF ch ch5t ca )ng%
9E hot Nng )Nt cch thP Nng " 0) b0o sao cho Dhng cE s c0n t2
t2aic *0y 2a t2!n )ng%
Hnh *.&.V: A tr` ho"t ng cJ% F7a6'
9U
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
70/86
n tt nghip Nguyn Quc Bo T12-K46
nh#ng 3' t2nh hay hot Nng ca nh#ng ngi sI >Png )ng cE >/' hi6'
g$y ng'y hiq) cho )ng%
9goi 2a ;Ung )Nt h6
th5ng ta l'n ph0i 3'an t$) -n "i6c s sI >Png thi-t bF g cho )Pc ch g q
0) b0o N an ton cao nh/t% H' tng loi U
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
71/86
n tt nghip Nguyn Quc Bo T12-K46
%HN =( > qNG HP )HNG MX %HrNG
CHONG '( )FNG UAN MKNG MX %HrNG
'R M; hBnh !ng !; phng
Hnh -.1.1: M) hnh m"ng m) (hbng
S
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
72/86
n tt nghip Nguyn Quc Bo T12-K46
S%S z!' c' thi-t D-
Hhi-t D- " t2iqn Dhai )ng nNi bN cho )Nt cng ty cE t2P s ti ; 9Ni
" )Nt chi nhnh t2ong Hu ; Zh inh p @ng c )Nt s5 y!' c' sa'%z!' c' thi-t D-^
Zc )y t2ong )ng cE Dh0 nOng t2ao i thng tin "8i nha'%
H/t c0 cc )y A' cE thq t2'y cp Unt(2n(t%
_p >Png )Nt s5 ph.ng php q tOng Dh0 nOng an ton thng tin%
ng cE thq >: >ng ) 2Nng th!) chi nhnh " ) 2Nng t2ong nNi
bN )Nt chi nhnh%
S%d t0 h6 th5ng
)i chi nhnh bao g) d sitch, )i sitch @ng "8i )Nt tng% i
sitch c chia thnh k K&x9 l K&x9d, K&x9k " K&x9m, )i K&x9
t.ng @ng "8i )Nt phng ban 2i!ng bi6t ca cng ty% Hhc t- s5 sitch " s5
K&x9 cE thq thay i t' th(o y!' c'% hnh " cch c/' hnh cho h6
th5ng hon ton t.ng t%ng sI >Png Fa ch Uu Sd%SY%|%| "8i s'bn(t)asD l d%d%|%|
Ki6c nh Fa ch Uu c chia nh sa'^
5i "8i cc sitch ; 9Ni
K&x9d cE >0i Fa ch Uu l Sd%SY%d%|vdm
K&x9k cE >0i Fa ch Uu l Sd%SY%k%|vdm
K&x9m cE >0i Fa ch Uu l Sd%SY%m%|vdm5i "8i cc sitch Hu ; Zh inh
K&x9d cE >0i Fa ch Uu l Sd%SY%%|vdm
K&x9k cE >0i Fa ch Uu l Sd%SY%Y%|vdm
K&x9m cE >0i Fa ch Uu l Sd%SY%%|vdm
ng n5i d 2o't(2 "8i nha' cE Fa ch Sd%SY%S%|vk|
d
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
73/86
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
74/86
n tt nghip Nguyn Quc Bo T12-K46
CHONG 1( )^IsN DHAI CkU HNH )^tN
CC )HIV) QW
'R ^,#ZY
S%S% Z/' hnh Fa ch Uu
Zng Q(2ial |v| ca 2o't(2 ;a9oi c D-t n5i "8i cng Q(2ial |vS ca
2o't(2 Qai]on% q cho ng D-t n5i hot Nng th cn c/' hnh Fa ch Uu
cho cc cng ny% Qa' $y l l6nh c/' hnh Fa ch Uu cho cc cng ny^
\outerSconTig termin%l
\outerOconTigQSho'tn%me H%Foi
H%FoiOconTigQSinterT%ce 'U/U
H%FoiOconTigP iTQSi( %22re'' 18&.1V.1.1 &??.&??.&??.&?&
H%FoiOconTigP iTQSclock r%te V-UUU
H%FoiOconTigP iTQSno 'hut2o,n
H%FoiOconTigP iTQSeYit
$y 2o't(2 ;a9oi c coi l ' t2'y nhp
q ngOn ch7n nh#ng t2'y cp t2i php t2c ti-p "o 2o't(2 bng cch
nh 3'a t(ln(t Dhi bi-t Fa ch Uu, hay l cG) t2c ti-p thi-t bF thng 3'a cngconsol( chng ta ti-n hnh thi-t lp " )1 ho passo2> t2'y cp "o 2o't(2%
m
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
75/86
n tt nghip Nguyn Quc Bo T12-K46
&6nh c/' hnh^
H%FoiOconTigQSline con'ol U
H%FoiOconTigPlineQS(%'',or2 %chkho%
H%FoiOconTigPlineQSlogin
H%FoiOconTigPlineQSeYit
&6nh 7t (nabl( passo2>^
H%FoiOconTigQSen%le (%'',or2 %chkho%
uasso2> ny Dhng c )1 ho, nE s hiqn thF >8i >ng cl(a2 t(*t
Dhi thc hi6n l6nh'ho, runningconTig, q )1 ho passo2> cE thq >ng l6nh^
H%FoiOconTigQSen%le 'ecret %chkho%&6nh c/' hnh passo2> cho cc phi!n t(ln(t^
H%FoiOconTigQSline vty U -
H%FoiOconTigPlineQS(%'',or2 %chkho%
H%FoiOconTigPlineQSlogin
H%FoiOconTigPlineQSeYit
9goi 2a, q tOng Dh0 nOng b0o )t chng ta cE thq c/' hnh uxuuasso2> x'th(ntication u2otocol ho7c Z;xu Zhall(ng( ;an>shaD(
x'th(ntication u2otocol t2!n D-t n5i gi#a hai 2o't(2%
Ki6c c/' hnh cE thq thc hi6n bng l6nh sa'^
H%FoiOconTigQSu'ern%me 6%i^on (%'',or2 %chkho%
H%FoiOconTigQSinterT%ce 'U/U
H%FoiOconTigP iTQSenc%('ul%tion (((
H%FoiOconTigP iTQS((( %uthentic%tion ch%(
H2!n 2o't(2 Qai]on cc l6nh c/' hnh hon ton t.ng t nh 5i "8i
2o't(2 ;a9oi%
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
76/86
n tt nghip Nguyn Quc Bo T12-K46
S%k% Z/' hnh ph.ng php Fnh t'y-n
Ki6c p >Png cc ph.ng php Fnh t'y-n s l) tOng Dh0 nOng an ton
thng chy t2ong )ng% ZE hai ph.ng php Fnh t'y-n l ph.ng php Fnh
t'y-n tnh Qtatic o't(s " Fnh t'y-n Nng Png cho cc )ng t.ng 5i nh+, cE cc 7c iq) sa'^
Qa' k| gi$y nE cp nht b0ng Fnh t'y-n )Nt ln " thng tin Fnh
t'y-n c cc 2o't(2 gIi 3'0ng b t2!n )ng%
QI >Png hop co'nt s5 b8c nhy q *c lp b0ng Fnh t'y-n% 9-' s5b8c nh0y l8n h.n S, gEi tin s bF loi b+%
Zc l6nh c/' hnh Uu t2!n cc 2o't(2^
H%FoiOconTigQSrouter ri(
H%FoiOconTigProuterQSnet,ork 18&.1V.U.U
6%i^onOconTigQSrouter ri(
6%i^onOconTigProuterQSnet,ork 18&.1V.U.U
S%m% Z/' hnh xZ&s
Ki6c c/' hnh xZ&s t2!n cc 2o't(2 s Dhi-n cc 2o't(2 hot Nng nh
)Nt i2(all thc thP%
$y cE thq c/' hnh xZ&s q ngOn ch7n cc gEi tin ca host
Sd%SY%% i 3'a 2o't(2 ;a9oi%
H%FoiOconTigQS%cce''Pli't 1 2eny 18&.1V.?.? U.U.U.U
H%FoiOconTigQS%cce''Pli't 1 (ermit U.U.U.U &??.&??.&??.&??
H%FoiOconTigQSinterT%ce 'U/U
H%FoiOconTigPiTQSi( %cce''Pgrou( 1 in
;ai >ng l6nh t2!n cng cE thq c thay bng l6nh sa'^
H%FoiOconTigQS%cce''Pli't 1 2eny ho't 18&.1V.?.?
Y
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
77/86
n tt nghip Nguyn Quc Bo T12-K46
H%FoiOconTigQS%cce''Pli't 1 (ermit %ny
H2!n ) hnh ) ph+ng, q ngOn ch7n hacD(2 ngoi t(ln(t "o 2o't(2
chng ta cE thq to xZ&s ngOn ch7n t(ln(t^
H%FoiOconTigQS%cce''Pli't 1U1 2eny tc( %ny %ny e] &*
H%FoiOconTigQS%cce''Pli't 1U1 (ermit i( %ny %ny
H%FoiOconTigQSinterT%ce 'U/1
H%FoiOconTigPiTQSi( %cce''Pgrou( 1U1 in
K8i c/' t2c l6nh nh t2!n, cc phi!n t(ln(t t ngoi "o 2o't(2 ;a9ois bF ngOn ch7n t2ong Dhi E cc gEi tin Uu Dhc "?n hot Nng bnh thng%
9goi nh#ng ph.ng php b0o h6 th5ng thng 3'a c/' hnh t2!n 2o't(2
c=ng cE thq sI >Png ph.ng php ch'yqn i Fa ch )ng 9(to2D x>>2(ss
H2anstation q ngOn ch7n "i6c bF pht hi6n Fa ch Uu ca cc )y t2ong nNi
bN )ng%
1R T\2#ch
d%S% Z/' hnh passo2> t2'y nhp
Z=ng gi5ng nh 2o't(2, t2!n sitch c=ng cE thq c/' hnh passo2> cho
cng consol c=ng nh cc phi!n t(ln(t% &6nh c/' hnh nh sa'^
6,itch1OconTigQSline con'ole U
6,itch1OconTigPlineQS(%'',or2 %chkho%6,itch1OconTigPlineQSlogin
6,itch1OconTigPlineQSeYit
&6nh 7t (nabl( passo2>^
6,itch1OconTigQSen%le (%'',or2 %chkho%
uasso2> ny Dhng c )1 ho, nE s hiqn thF >8i >ng cl(a2 t(*t
Dhi thc hi6n l6nh'ho, runningconTig, q )1 ho passo2> cE thq >ng l6nh^
6,itch1OconTigQSen%le 'ecret %chkho%
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
78/86
n tt nghip Nguyn Quc Bo T12-K46
&6nh c/' hnh passo2> cho cc phi!n t(ln(t^
6,itch1OconTigQSline vty U 1?
6,itch1OconTigPlineQS(%'',or2 %chkho%
6,itch1OconTigPlineQSlogin
6,itch1OconTigPlineQSeYit
d%d% Z/' hnh K&x9
H2!n )i sitch c chia thnh k K&x9 l K&x9d, K&x9k "
K&x9m% Ki6c ph$n chia cc po2t ca sitch "o cc K&x9 nh sa'^
uo2t S -n th'Nc K&x9d
uo2t w -n SY th'Nc K&x9k
uo2t S -n dm th'Nc K&x9m
i!ng K&x9S c >ng l) K&x9 3'0n lC " Dhng cE po2t no ca
sitch c gGn "o K&x9S%
d%d%S% Z/' hnh cho chi nhnh ; 9Ni
Zc l6nh c/' hnh cho sitchS nh sa'^
6,itch1Svl%n 2%t%%'e
6,itch1Ovl%nQSvl%n &
6,itch1Ovl%nQSvl%n *
6,itch1Ovl%nQSvl%n -
6,itch1Ovl%nQSvt( 2om%in h%noi
6,itch1Ovl%nQSvt( 'erver
6,itch1Ovl%nQSeYit
Qa' cc c$' l6nh ny K&x9d, K&x9k " K&x9m c to 2a t2!n
sitchS% QitchS c 7t t2ng thi KHu s(2"(2 " n) t2ong >o)ain
hahoi% 9h "y sitchS s cE nhi6) "P 3'0ng b thng tin "A K&x9 cho cc
sitch cn li%
q Fnh t'y-n cho cc K&x9 ta cn ph0i c/' hnh cc s'bint(2ac( t2!n
2o't(2%
7/21/2019 Do An - Mang Lan Va Cac Phuong Phap Bao Mat
79/86
n tt nghip Nguyn Quc Bo T12-K46
H%FoiOconTigQSinterT%ce T%U/U
H%FoiOconTigPiTQSno 'hut2o,n
H%FoiOconTigPiTQSinterT%ce T%U/U.&
H%FoiOconTigPiTQSenc%('ul%tion 2ot1] &
H%FoiOconTigPiTQSi( %22re'' 18&.1V.&.1 &??.&??.&??.U
JJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJ
H%FoiOconTigPiTQSinterT%ce T%U/U.*
H%FoiOconTigPiTQSenc%('ul%tion 2ot1] *
H%FoiOconTigPiTQSi( %22re'' 18&.1V.*.1 &??.&??.&??.U
JJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJH%FoiOconTigPiTQSinterT%ce T%U/U.-
H%FoiOconTigPiTQSenc%('ul%tion 2ot1] -
H%FoiOconTigPiTQSi( %22re'' 18&.1V.-.1 &??.&??.&??.U
H%FoiOconTigPiTQSeYit
R'a cc c$' l6nh t2!n, cng a|v| ca 2o't(2 ;a9oi c chia thnh k
cng logic t.ng @ng "8i k K&x9%Qa' Dhi to 2a cc K&x9 cn ph0i gn cc cng ca sitch "o cc
K&x9 t.ng @ng%
6,itch1SconTig termin%l
6,itch1OconTigQSinterT%ce T%U/Y
6,itch1OconTigPiTQS',itch(ort mo2e %cce''
6,itch1OconTigPiTQS',itch(ort %cce'' vl