ǰÑÔ
дÕâÆªÎÄÕÂÓÐÈý¸öÔÒò£¬Ò»ÊÇÔÚ¹¤×÷ÖÐÒ»Ö±¼èÄѵØÃþË÷×ÅÕâ¿éÒ²ÔøÐ´¹ýһƪºÜ´ÖÂԵĴóÊý¾ÝÖ®°²È«Âþ̸ £¨Ïë¼ÌÐøÍ²ۣ©£»¶þÊÇ¿´µ½Á˰¢ÀïµÄÕÐÆ¸¹ã¸æ-Ò»ÆðÀ´ÁÄÁÄÕâ¸öÐÂְλ£º´óÊý¾Ý°²È«·ÖÎöʦ£»ÈýÊÇÕû¸ö2015µÄRSA»áÒé
Intelligence Data-Driven ³ö¾³ÂÊÌ«¸ßÁË£¬ÓÚÊÇÏë̸̸¡£
´óÊý¾Ý°²È«£¬¹ËÃû˼Ò壬ÓôóÊý¾Ý¼¼Êõ½â¾ö°²È«ÎÊÌâ¡£ºËÐÄ¡ª¡ª½â¾ö°²È«ÎÊÌ⣬ÊֶΡª¡ª´óÊý¾Ý¼¼Êõ¡£
ÎÒÃÇ´ÓºËÐijö·¢£¬°²È«ÎÊÌâ³éÏóÀ´Ëµ¾ÍÊǹ¥»÷Óë·ÀÓù£¬½ÓÏÂÀ´Ã÷È··ÀÓù¶ÔÏóÊÇʲô£¿¹¥»÷Ä¿µÄÊÇʲô£¿¹¥»÷ÊÖ¶ÎÊÇÔõÑùµÄ£¿¹¥»÷ÕßµÄÌØÕ÷£¿Ò»¾ä»°¡ª¡ª¸ãÇå³þËΪÁËʲôĿµÄͨ¹ýʲôÊֶι¥»÷ÁËË¡£
±ÈÈç˵·ÀÓù¶ÔÏóÓÐÆóÒµÄÚ²¿°²È«£¬ÓжÔÍâ·¢²¼²úÆ·°²È«£¬Í¬Ê±·ÀÓù¶ÔÏóÓÖ¾ö¶¨Á˲»Í¬µÄ¹¥»÷Ä¿µÄÓë¹¥»÷ÊֶΣ¬ÓÐÆóÒµÈëÇÖ£¬ÓжԲúÆ·±¾ÉíµÄ¹¥»÷£¨±ÈÈç˵Èí¼þÆÆ½â£¬ÓÎÏ·Íâ¹Ò£¬¶©µ¥ÆÛÕ©£©£¬ÓжԲúÆ·Óû§µÄ¹¥»÷£¨±ÈÈçÀûÓÃÖ§¸¶Â©¶´ÇÔÈ¡Óû§²Æ²ú£©£¬Í¬Ñù·¢Æð¹¥»÷µÄ¹¥»÷ÕßÃÇÌØÕ÷ÓÖÊÇåÄÒìµÄ£¬ÓÐÎÞÌØ¶¨Ä¿µÄÅúÁ¿É¢µ¯¹¥»÷£¬Óп¿½Óµ¥ÕõÇ®µÄÉͽðºÚ¿Í£¬ÓÐÍâ¹Ò×÷·»µÈµÈ¡£
ÔÚÃ÷È·Á˵ÄÎÊÌâºó£¬½ÓÏÂÀ´¾ÍÊÇÈ·¶¨½â¾öÎÊÌâµÄ·½·¨£¬´«Í³·½·¨µÄȱÏÝÊÇʲô£¿´óÊý¾Ý¼¼Êõ½â¾öÎÊÌâµÄÓÅÊÆÓÖÊÇʲô£¿±ÈÈç˵WAFϵͳÖУ¬´«Í³µÄ¼ì²â»úÖÆ¡ª¡ª»ùÓÚÇ©Ãû¿â£¨ºÚÃûµ¥£©£¬È±ÏÝÊǶÔδ֪©¶´£¨0day)
²»¿É¸ÐÖª¡£½â¾ö·½°¸¡ª¡ª»ùÓÚÒì³££¨°×Ãûµ¥£©£¬ÈçºÎ¼ø¶¨Òì³£¡ª¡ª»úÆ÷ѧϰ£¨Ñ§Ï°Õý³£µÄÐÐΪģʽ£©£¬ÈçºÎ¶Ô´óÁ¿Êý¾Ý¼ø¶¨Òì³£¡ª¡ª´óÊý¾Ý¼¼ÊõÖ§³ÅϵĻúÆ÷ѧϰ¡£
ÔÚÕâÒ»¹ý³Ì£¬ÎÒÃÇÐèÒª¾ß±¸ÁìÓò֪ʶ£¨°²È«ÖªÊ¶£©£¬Êý¾Ý¿ÆÑ§ÖªÊ¶£¨Êý¾Ý·ÖÎö֪ʶ£¬»úÆ÷ѧϰ£¬Îı¾·ÖÎö£¬¿ÉÊÓ»¯£©£¬´óÊý¾Ý֪ʶ£¨Êý¾ÝÊÕ¼¯£¬Êý¾Ý´æ´¢£¬Êý¾Ý´«Ê䣬Êý¾Ý·Ö²¼Ê½¼ÆË㣩£¬±à³Ì֪ʶ¡£
·ÂþÂþÆäÐÞÔ¶Ù⣬ÎὫËÀ¿Äµ½µ×¡
±¾ÎľÍÒÔÆóÒµÈëÇÖ¼ì²âÈÕÖ¾·ÖÎöΪ³¡¾°À´Ì¸Ì¸´óÊý¾Ý°²È«¡£
Ò»¡¢°²È«ÁìÓò
´óÊý¾Ý°²È«·ÖÎö×îÈÝÒ××߯«µÄ¾ÍÊǹý¶ÈÇ¿µ÷Êý¾Ý¼ÆËãÆ½Ì¨£¨´óÊý¾Ý£©£¬Ëã·¨£¨»úÆ÷ѧϰ£©£¬¶øÊ§È¥Á˱¾ÐÄ£¬ºöÂÔÁËÎÒÃÇʹÓÃÕâÒ»¼¼ÊõµÄÄ¿µÄ£¬ÒÔÈëÇÖ¼ì²âΪÀý£¬ÎÒÃÇÏ£ÍûÈÕÖ¾·ÖÎö´ïµ½ÒÔÏÂÄ¿µÄ£º
ÈçºÎ¸ÐÖªÍþв£¬ÎÒÃÇ¿ÉÒÔÏȶԹ¥»÷Õß½øÐлÏñ£¬¹¥»÷ÊֶνøÐн¨Ä£¡£
1. ¹¥»÷Õß»Ïñ

ÕâÀïÊǷdz£´ÖÂԵķÖÀ࣬ʵ¼ÊÉÏÎÒÃÇ¿ÉÒÔÓùØÏµÍ¼£¨Éç½»ÍøÍÚ¾ò£©µÄ·½Ê½½«¹¥»÷Õß¹ØÁªÆðÀ´£¬¶Ôȡ֤ץ»µÈËÒ²ÊÇÓÐЧ¹ûµÄ¡£
2. ¹¥»÷Êֶν¨Ä£
ÏàÐÅϲ»¶ß£paper¡¢pptµÄÈ˶ÔAttack Models¡¢ Attack Trees¡¢ Kill
ChainÕâÈý¸öÊõÓïÌØ±ðÊìϤ£¬ÌرðÊÇ¿´¹ý2013ÄêºóµÄ¸÷´ó°²È«»áÒéÎĵµºó£¬Æäʵ˵µÄ¶¼Êǹ¥»÷ÐÐΪ½¨Ä£¡£
£¨1£© ÉøÍ¸Ä£ÐÍ

£¨2£©ÆÕͨ¹¥»÷Ä£ÐÍ

£¨3£©¹¥»÷Ä£ÐÍ£¨Éý¼¶°æ£©

×¢ÒâÒÔÉϹ¥»÷ÊÖ¶ÎÖ»ÊǸ߶Ⱦ«Á¶µÄ¹¥»÷»·½Ú£¬Êµ¼ÊµÄ¹¥»÷¼ì²âÖУ¬ÎÒÃÇÐèÒª¾¡¿ÉÄܾ«È·µÄ»¹ÔÈëÇÖ³¡¾°£¨°üÀ¨¶ÔÓ¦µÄÕý³£³¡¾°ÊÇÔõÑùµÄ£©£¬´ÓÈëÇÖ³¡¾°ÖÐÌáÁ¶¹Ø¼ü»·½Ú£¬´Ó¶ø¼ì²â³öÒì³£µÄ¹¥»÷ÐÐΪ¡£
ÔÚÊìϤÁËɱÉúÁ´£¨kill chain£©ºó£¬½ÓÏÂÀ´Òª×öµÄ¾ÍÊÇÔÚ¹¹³ÉÁ´µÄÿ¸ö»·½Ú½øÐоѻ÷£¬×¢ÒâÔ½Íùºó³É±¾Ô½¸ß¡£¶øÃ¿¸ö½×¶ÎµÄ²Ù×÷±ØÈ»»áÑã¹ýÁôºÛ£¬ÕâЩºÛ¼££¬¾ÍÊÇÎÒÃǽøÐÐÊý¾Ý·ÖÎöµÄÊý¾ÝÔ´£¬ÖªµÀ¶ÔʲôÊý¾Ý½øÐзÖÎöÊÇ×î×îÖØÒªµÄ£¨Êý¾ÝÁ¿ÒªÇ¡µ½ºÃ´¦£¬Òª¶àµ½×ã¹»Ö§³ÅÊý¾Ý·ÖÎöÓëȡ֤£¬ÒªÉÙµ½É¸Ñ¡µôÔëÒôÊý¾Ý£©¡£
¶þ¡¢Êý¾Ý¿ÆÑ§
ÔÚÃ÷È·ÁËÎÒÃÇÒª½â¾öµÄÎÊÌ⣬½ÓÏÂÀ´ÎÒÃÇÀ´ÆÕ¼°Ò»ÏÂÊý¾Ý·ÖÎöµÄ»ù±¾Á÷³Ì£º

´ÓÉÏͼ¿ÉÒÔ¿´³ö£¬´«Í³µÄÊý¾Ý·ÖÎöÔÚÄ£ÐÍÑ¡ÔñÉ϶¼½ö½öÓÃÁË0¡ª¡ª¹æÔò£¬1¡ª¡ªÍ³¼Æ·ÖÎö£¬ÉèÖûùÏߣ¬ÒÀ¿¿ãÐÖµµÄ·½·¨¡£
Êý¾Ý·ÖÎöÓëÁìÓò֪ʶÊǽôÃÜñîºÏµÄ£¬Ç§Íò²»ÒªÎóÈëÌ×ÓÃËã·¨µÄÎóÇø£¬Òª½øÐлùÓÚÐÐΪ½¨Ä££¨¹¥»÷ÐÐΪ£¬Õý³£ÐÐΪ£©µÄÊý¾Ý·ÖÎö£¬¿ÉÒÔ´Óµ¥µã·ÖÎö£¨µ¥ÌõÊý¾ÝµÄÉî¶È·ÖÎö£¬ÀýÈç·ÖÎöµ¥ÌõHTTPÇëÇóÊÇ·ñÊǹ¥»÷ÇëÇ󣩣¬¼òµ¥µÄ¹ØÁª·ÖÎö£¨ÀýÈç·ÖÎöÒ»¸ösessionÏ£¬¶àÌõHTTPÇëÇóµÄ¹ØÁª¹ØÏµ£¬ÊÇ·ñΪɨÃèÆ÷ÐÐΪ£¬ÊÇ·ñÓг¢ÊÔÈÆ¹ýWAFµÄ²Ù×÷£¬ÊÇ·ñ·ûºÏ¹¥»÷Á´µÄ¹Ø¼ü²½Ö裩£¬¸´ÔӵĹØÁª·ÖÎö£¨ÀýÈçWebÈÕÖ¾£¬Êý¾Ý¿âÈÕÖ¾£¬²Ù×÷ϵͳÈÕÖ¾µÄÁª¶¯·ÖÎö£¬ÀýÈçSQL×¢ÈëдÂí¹¥»÷ÖÐHTTPÇëÇó¶ÔÓ¦µÄÊý¾Ý¿â²Ù×÷£¬Ö÷»ú²Ù×÷£©À´Öð²½ÉîÈë·ÖÎö£¬µ±¹¥»÷³¡¾°ºÜ¸´ÔÓµÄʱºò£¬ÎÒÃÇ¿ÉÒÔ¿¼ÂÇ´Ó½á¹û³ö·¢µÄ·½Ê½À´»ØËÝ£¬ÕâЩ¼¼Çɶ¼È¡¾öÓÚÁìÓò֪ʶ¡£
ÏÂÃæÁоÙһЩ´«Í³µÄ¹ØÁª¼¼ÇÉ£º
1.¹æÔò¹ØÁª
If the system sees an EVENT E1 where E1.eventType=portscan followed by an event E2 where E2.srcip=E1.srcip and E2.dstip = E1.dstip and E2.eventType = fw.reject then doSomething |
2.©¶´¹ØÁª£º
½«Â©¶´É¨ÃèÊý¾ÝºÍʵʱʼþÊý¾Ý½áºÏÆðÀ´£¬ÒÔ±ã°ïÖú¼õÉÙ¼ÙÑôÐÔ false positive
e.g. Èç¹ûIDS¼ì²âµ½Á˶˿ÚɨÃ裬¿ÉÒÔ¶ÔÍøÂç½øÐÐÀýÐеÄ©¶´É¨Ã裬À´ÑéÖ¤ÎÊÌâÖеÄÖ÷»úÊÇ·ñÕæµÄ´ò¿ªÁ˸ö¶Ë¿Ú£¬ÊÇ·ñÈÝÒ×Ôâµ½¹¥»÷
3.Ö¸ÎÆ¹ØÁª
4.·´¶Ë¿Ú¹Ø
if (event E1.dstport != (Known_Open_Ports on event E1.dstip)) then doSomething |
5.¹ØÁªÁÐ±í¹ØÁª
ÍⲿÇ鱨ÁÐ±í£¬ÀýÈç¹¥»÷ÕßÁбí
6. »·¾³¹ØÁª
e.g.ÈçºÎÖªµÀ¹«Ë¾µÄ¼ÙÆÚ°²ÅÅ£¬¿ÉÒÔʹÓÃÕâÒ»ÐÅÏ¢£¬ÔÚÿ¸öÈ˶¼²»ÉϰàµÄʱºò·¢ÏÖÄÚ²¿×ÊÔ´µÄ·ÃÎÊ¡£
ÐݼÙʱ¼ä±í ÒµÎñʱ¼ä ¼ÙÈռƻ® ÄÚ²¿×ÊÔ´·ÃÎÊȨÏÞ ÖØ¸´µÄÍøÂ硰ʼþ¡±ÀýÈç©¶´É¨Ãè ¼Æ»®µÄϵͳ¡¢Êý¾Ý´æ´¢±¸·ÝµÈ ά»¤°²ÅÅ£¬ÀýÈç²Ù×÷ϵͳ²¹¶¡µÈ |
³£¼ûµÄ¹ØÁªËÑË÷ģʽ£º
x´ÎµÇ¼ʧ°ÜºóÓÐÒ»´ÎµÇ¼³É¹¦ ´´½¨·Ç¹ÜÀíÔ±ÕË»§Ö®ºó½øÐÐȨÏÞÌáÉý VPNÓû§ÔÚ¹¤×÷ʱ¼äÄÚ/ÍâµÇ¼£¬²¢ÏòÍøÂçÖ®Íâ´«Êä¸ü¶àµÄÊý¾Ý ÍøÂçÉϵÄһ̨Ö÷»ú¿ªÊ¼¹¥»÷»òÕß̽²éÍøÂçÉÏµÄÆäËûÖ÷»ú ÔںܽӽüµÄʱ¼äÄÚX´Î³¢ÊÔ·ÃÎÊÓû§Ã»ÓÐȨÏ޵Ĺ²Ïí£¯Îļþ£¯Ä¿Â¼µÈ ´Óͬһ¸ö¹¤×÷Õ¾ÒÔ¶à¸öÓû§ÃûµÇ¼ ÔÚ¶à¸öϵͳÉÏÓжà¸ö·À²¡¶¾Èí¼þʧЧ ¹¥»÷DMZϵͳ£¬ËæºóÓгöÕ¾Á¬½Ó ¹¥»÷DMZϵͳ£¬ËæºóÔÚͬһ¸öϵͳÉϸü¸ÄÅäÖà ÔÚ¼¸·ÖÖÓÄÚÓÐÐí¶àWeb 404£¬401 500ºÍÆäËûweb´íÎóÂë |
ÒÔÉ϶¼Êǵ¥¿¿ÁìÓò֪ʶ¸ÐÖªÍþв£¬ÁìÓò֪ʶµÄȱÏÝÊÇÌ«ÒÀÀµÓÚר¼Ò֪ʶÁË£¬¶ø×¨¼Ò֪ʶÊÇÓÐÏ޵ģ¬Õâ¸öʱºò»úÆ÷ѧϰ¾Í¿ÉÒÔ·¢»Ó³¤¶ÈÁË£¬ÀýÈçÀí¹¤ÔüÑÛÖеÄHMM¼°°²È«Ó¦Óá£
¼´Ê¹ÊÇʹÓûúÆ÷ѧϰҲÈÔÀë²»¿ª°²È«ÁìÓò֪ʶ£¬Óа²È«ÁìÓò±³¾°µÄÈËÔÚÊý¾ÝÔ¤´¦Àí½×¶Î¡¢featureÑ¡Ôñ½×¶Î»áʰ빦±¶£¬±ÈÈç¶Ô·ÃÎÊÈÕÖ¾½øÐа×Ãûµ¥½¨Ä£Ê±£¬´Ó·ÃÎÊÈÕÖ¾ÖÐɸѡ³öÒì³£ÈÕÖ¾£¨¹¥»÷ÈÕÖ¾¡¢²»´æÔÚµÄÈÕÖ¾¡¢·þÎñÆ÷´íÎóÈÕÖ¾£©£¬ÐèÒª°²È«ÁìÓò֪ʶ£¨ÖªµÀʲôÊǹ¥»÷£©¡¢web·þÎñÆ÷֪ʶ£¨ÖªµÀʲôÊÇÒì³££¬urlÖØÐ´£©½øÐÐÊý¾ÝÇåÀí£»±ÈÈçHMM
web°²È«¼ì²â featureµÄÑ¡Ôñ£¬ÎÒÃÇÖªµÀ¹¥»÷×¢ÈëµãÔÚÄÄÀ¾Í²»ÐèÒª½øÐÐÔËÆøÁ÷µÄfeatureÑ¡Ôñ¡¢½µÎ¬´¦Àí¡£
»úÆ÷ѧϰËäÈ»ÄÜÃÖ²¹µ¥¿¿ÁìÓò֪ʶ·ÖÎöµÄȱÏÝ£¬µ«ÓÉÓÚÆä´æÔÚ׼ȷÂʵÄÎÊÌâ¶ø²»ÄÜÖ±½ÓÔÚÏßÉÏÓ¦Óã¬Ö»´æÔÚÓÚÔËάÀëÏߵĻ·¾³Ï¡£»òÐíÊÇËã·¨ÐèÒªÓÅ»¯£¬µ«¸öÈËÈÏΪÄܽâ¾öµ±Ç°·½·¨²»Äܽâ¾öµÄÎÊÌâ¾ÍÊǺܴóµÄ½ø²½ÁË£¬±ÈÈç˵ÄÜ·¢ÏÖÒ»¸ö0
day¡£ÎÒÏëµ±µçµÆ¸Õ·¢Ã÷³öÀ´µÄʱºò£¬Ò²ÊǾø¶ÔûÓÐÀ¯ÖòºÃÓã¬Ò²Ï£Íû¼Ü¹¹Ê¦ÃDz»Òªµ¥Ò»µÄ¿¿×¼È·ÂÊÕâ¸öΨһµÄ±ê×¼À´ÆÀ¼Û»úÆ÷ѧϰµÄ½á¹û¡£
ÔÚÖªµÀÁËÈçºÎ½øÐÐÊý¾Ý·ÖÎöºó£¬½ÓÏÂÀ´µÄ¾ÍÊÇÈçºÎÔÚÊý¾ÝÁ¿¾Þ´óµÄÇé¿öϽøÐзÖÎö¡£Íæµ¥»ú½Å±¾µÄÄê´úҪһȥ²»·µÁË£¬·Ö²¼Ê½ÐèÒª¸ãÆð¡£
Èý¡¢´óÊý¾Ý¼¼Êõ
ÎÒÃÇҪʹÓõĴóÊý¾Ý¼¼ÊõµÄºËÐÄÆäʵ¾ÍÊÇÊÇ·Ö²¼Ê½´æ´¢Óë·Ö²¼Ê½¼ÆË㣬µ±È»ÄÜÀûÓÃÒÑÓеÄÊý¾ÝÔ¤´¦Àí½Ó¿Ú£¬Ëã·¨½Ó¿ÚÒ²ÊǺÜÓаïÖúµÄ¡£
ÒÔÏÂÊÇÒ»¸öÍêÕûµÄ´óÊý¾Ý·ÖÎö¼Ü¹¹Í¼£º
µÃ³öÕâ¸ö¼Ü¹¹£¬Ò²×ßÁ˲»ÉÙÍä·£¬×ʼÓÉÓÚ²»Á˽âElasticSearchµÄÌØÐÔ£¬²ÉÓõÄÊÇÖ±½ÓʹÓÃElasticSearch¶ÔÊý¾ÝÔ´½øÐзÖÎöÓë½á¹û´æ´¢£¬ElasticSearchÈ«ÎÄË÷ÒýµÄÉè¼Æ¾ö¶¨ÁËta²»ÊÊºÏÆµ·±Ð´²Ù×÷²¢ÇÒ»áºÜ¿äÕŵÄÀ©´óÊý¾ÝÁ¿£¬ËùÒÔ×îºóÒýÈëÁ˸üÊʺϼ°Ê±¶Áд²Ù×÷µÄHBaseÊý¾Ý¿âÀ´×ö³Ö¾Ã»¯´æ´¢£¬Í¬Ê±Ôö¼ÓÁËËã·¨²ãÕâ¿é£¬Ö»ÔÚElasticSearchÀë´æ´¢×îÖÕ½á¹û¡£
´óÊý¾ÝÓÐ×ÅÅÓ´óµÄÉú̬Ȧ£¬½ÏÖ®»úÆ÷ѧϰ£¨È˹¤ÖÇÄÜ£¬Éî¶Èѧϰ£©µÄ·¢Õ¹£¬Êý¾Ý´æ´¢¡¢Êý¾Ý¼ÆËã·½Ãæ¼òÖ±ÊÇÍ»·ÉÃͽø£¬ÎªËã·¨µÄ·¢Õ¹ÌṩÁËÁ¼ºÃµÄÖ§³Å£¬µ±È»Ñ§Ï°µÄ³É±¾Ò²·Ç³£¸ß¡£ÒÔÏÂÊÇÈëÃŵÄһЩÎÄÕ£º
´óÊý¾ÝÖ®hadoopα¼¯Èº´î½¨ÓëMapReduce±à³ÌÈëÃÅ ´óÊý¾ÝÖ®hive°²×°¼°·ÖÎöwebÈÕ־ʵÀý
´óÊý¾ÝÖ®elasticsearch¼¯Èº´î½¨Óë»ù±¾Ê¹ÓÃ-ÉøÍ¸ÈËÔ±ÈëÃÅ ´óÊý¾ÝÖ®RedisÉøÍ¸ÈËÔ±ÈëÃÅ¡ª¡ª
°²×°ÅäÖᢻù±¾²Ù×÷¼°³£ÓùÜÀí¹¤¾ß ´óÊý¾ÝÖ®MongoDBµÄ°²×°ÅäÖᢻù±¾²Ù×÷¼°Perl²Ù×÷MongoDB
Íòʾ߱¸£¬¾Í²îµÚËĸöÄÜÁ¦¡ª¡ª±à³Ì£¬ÕâÊǽ«Ïë·¨ÂäʵµÄÄÜÁ¦£¬·ñÔò¶¼ÊǾµ»¨Ë®Ô¡£²»ÊÇÓÐÒ»¾äÀÏ»°Âð?¡°Talk
is cheap, show me the code¡±¡£
ËÄ¡¢±à³Ì
¶ÔÓÚÕ½¶·Á¦¸º5µÄÔü£¬±à³Ì·½ÃæµÄÐĵÃÊÇÔÚÌ«¶àÁË£¬Ã¿Ìì¶¼ÓÐз¢ÏÖ£¬ÕâÀï¾Í˵˵¾Ñé̸֮°É¡£
1. ÓïÑÔÑ¡Ôñ
ÏÈʹÓÃPython»òÕßRÈ¥×öСÊý¾ÝÁ¿£¨Ñù±¾Êý¾Ý£©µÄ·ÖÎö£¬È»ºóʹÓÃJavaʵÏÖ·Ö²¼Ê½Ëã·¨£¨ÔÚ´óÊý¾ÝµÄÉú̬ȦÖУ¬ÎªÁ˱ÜÃâ²»±ØÒªµÄÂé·³»¹ÊÇÓÃÔÉúÓïÑÔJavaºÃ£©¡£
2. ÈÕÖ¾¸ñʽÎÊÌâ
ÈÕÖ¾´¦ÀíÖУ¬ÊäÈëÈÕÖ¾µÄ¸ñʽ»áÖ±½ÓÓ°ÏìÄ£ÐÍÔËÐÐʱ¼ä£¬ÌرðÊDzÉÓÃÕýÔòµÄ·½Ê½¶ÔÎı¾¸ñʽµÄÊäÈë½øÐнâÎö»á¼«¶ÈÏûºÄʱ¼ä£¬ËùÒÔÔÚÄ£ÐÍÔËËãʱÐèÒªÏȶÔÈÕÖ¾½øÐÐÐòÁл¯´¦Àí£¬Protocol
Buffer¾ÍÊǺܺõÄÑ¡Ôñ£¬µ«Ç§Íò×¢Òâjar°üµÄ°æ±¾Å¶¡£
½áÓï
´óÊý¾Ý°²È«Éæ¼°µÄÄÚÈݷdz£ÉîÈ룬ÿ¸ö·½Ãæ¶¼ÊǼ¸±¾ºñºñµÄÊ飬ÕâÀïÖ»ÊǷdz£Ç³ÏÔµÄÂþ̸£¬¸ø´ó¼ÒÒ»·ùÆ½ÃæµÄ¿ò¼Üͼ£¬ÆÚ´ý¸ü¶àµÄÊý¾Ý¿ÆÑ§£¨Êý¾Ý·ÖÎö£¬»úÆ÷ѧϰ£¬´óÊý¾Ý´¦Àí£©ÁìÓòµÄÈ˽øÈëÕâ¸öÐÐÒµ£¬»òÕß°²È«ÐÐÒµµÄÈË¿ªÍØ×Ô¼ºÔÚÊý¾Ý·ÖÎö·½ÃæµÄÉî¶È£¬´óÊý¾Ý°²È«½«·¢Õ¹µÄ¸üºÃ£¬²»½ö½öÊǽкò»½Ð×ùÁË¡£
×îºóÒ»¾ä£¬Êµ¼ù³öÕæÖª£¬¿ªÁ·°É£¡
|