The Improving Research Of IP Comprehensive Information System And IPv4 Ownership Database

With the development of network technology and application, the security of large networks show highlights. TCP and IP protocol as the primary network protocol enables IP addresses become an indispensable element of analyzing network activity. Since the IP addresses allocation and management gradually standardized, the basic information of IP addresses are inseparable with routing, tracking, positioning, and other operations. It plays an indispensable role in the network statistical analysis, security policies, virus and attack. Therefore, obtaining IP addresses’ basic information plays a key role on guaranteeing the stability and security of network operation.This thesis is based on the project of CERNET backbone upgradation in the 3rd phase of the 211 program, based on the background of offering IP addresses integrated information system including IP addresses’ ownership acquisition information and actual use location information for CERNET(China Education and Research Network) security system. In order to achieve the validity of information, and efficient, macro of management, establishing a unified information platform for network security management to guarantee the databases can be used for different management and statistical procedures.Firstly, this paper researches the requirement and the possible improvement of the original prototype system, improve system according to log management, user management, fault management module of operation and management module and design new data deployment scenario, enable IPCIS system provide more flexible IP information services for the CERNET network management system, deploying additional databases in the IPCIS system in order to provide platform maintenance in the future, providing good scalability in order to adding more distributed nodes, and also providing protection for the security system of the entire CERNET.Secondly, achieving the automation of periodic update of IPv4 management databases in the IPCIS system, ensuring IPv4 management databases on line and running, providing reliable information services for users. And providing REST style query API based on Web services, so that the database can provide cross-platform, cross-server service.Finally, provide the supplementary and verification program based on AS information and IP addresses mapping relationship, finding the ISP relationships between original home databases and home information of verify information database by looking the constructed AS relationship tree, identify secondary distribution ISP, achieve the refinement and validation of ISP granularity, to achieve the purpose of supplying and verifying IP addresses management ownership information of IPv4 management ownership databases. Ensure the accuracy and reliability of the attribution information required by the user.