本文選題：網(wǎng)絡(luò)信息審計　切入點：抓包引擎模塊　出處：《西安電子科技大學(xué)》2015年碩士論文　論文類型：學(xué)位論文

【摘要】：二十一世紀(jì),互聯(lián)網(wǎng)正在飛速發(fā)展,它在一步步改變著人們的生活,為人們帶來了很多便利。工作中,人們利用互聯(lián)網(wǎng)辦公,處理工作遇到的問題,這提高了人們的工作效率;生活中,人們利用網(wǎng)絡(luò)購物,觀看視頻,查閱信息等等,方便了我們的生活。工作中,生活中,人們都在使用著網(wǎng)絡(luò),可以說,離開了網(wǎng)絡(luò),人們的工作、生活將變得異常困難。然而,網(wǎng)絡(luò)快速發(fā)展的同時也帶來一些問題。淫穢色情反動內(nèi)容在互聯(lián)網(wǎng)上的泛濫,企業(yè)技術(shù)資料商業(yè)機(jī)密泄露,員工上班時間從事與工作無關(guān)的網(wǎng)絡(luò)娛樂活動導(dǎo)致工作效率低下,帶寬總是不夠用導(dǎo)致正常業(yè)務(wù)無法開展。問題的陸續(xù)出現(xiàn),網(wǎng)絡(luò)安全相關(guān)問題開始引起了人們的重視。網(wǎng)絡(luò)安全問題的產(chǎn)生,給企業(yè)、國家造成了重大的經(jīng)濟(jì)損失。然而,市場上并沒有一款理想的產(chǎn)品去很好解決上述的相關(guān)問題。本論文設(shè)計實現(xiàn)了一套對內(nèi)容、行為以及安全進(jìn)行審計的系統(tǒng),很好的解決了這些安全問題。網(wǎng)絡(luò)信息審計系統(tǒng)是在參考捷普信息審計系統(tǒng)、深信服上網(wǎng)行為管理、華語唐風(fēng)信息審計而進(jìn)行設(shè)計實現(xiàn)的。捷普信息審計系統(tǒng)主要是針對少部分網(wǎng)絡(luò)行為和郵件、文件傳輸?shù)葏f(xié)議內(nèi)容進(jìn)行信息審計的系統(tǒng);深信服上網(wǎng)行為管理是深信服公司開發(fā)的一套對網(wǎng)絡(luò)行為進(jìn)行審計和管理的系統(tǒng),其特色是對行為的審計比較細(xì)粒;華語唐風(fēng)信息審計同樣是為進(jìn)行網(wǎng)絡(luò)信息審計而開發(fā)的系統(tǒng),報表形式多樣化是其一大特點。首先,本論文介紹了論文選題背景和意義,分析了網(wǎng)絡(luò)信息審計在國內(nèi)外的發(fā)展現(xiàn)狀,描述了論文的內(nèi)容和組織結(jié)構(gòu);其次對論文應(yīng)用的相關(guān)技術(shù)進(jìn)行了介紹,相關(guān)技術(shù)包括URL匹配原理、DPDK抓包技術(shù)以及數(shù)據(jù)庫加密審計技術(shù);再次,對系統(tǒng)進(jìn)行了需求分析,其主要內(nèi)容包括:系統(tǒng)業(yè)務(wù)的陳述,系統(tǒng)功能需求分析和系統(tǒng)非功能性需求,其中,功能模塊包括抓包引擎模塊、內(nèi)容審計模塊、行為審計模塊和安全審計模塊;再次,在需求確立的基礎(chǔ)上,給出了系統(tǒng)整體設(shè)計方案,并介紹了主要功能模塊的設(shè)計與實現(xiàn),最后,對系統(tǒng)進(jìn)行了集成與測試,并對測試結(jié)果進(jìn)行了詳細(xì)的說明。本系統(tǒng)在信息審計平臺上驗證了系統(tǒng)的各項基本功能。經(jīng)測試結(jié)果表明,系統(tǒng)采用抓包、分析方案可行。系統(tǒng)各項基本功能驗證正確、性能較好、穩(wěn)定性高,網(wǎng)絡(luò)信息審計開發(fā)成功。本系統(tǒng)完善了市場上對信息審計的各項需求,為信息安全提供了一份有力的保證。
[Abstract]:In 21th century, the Internet is developing rapidly, it is changing people's life step by step, has brought a lot of convenience for people. In the work, people use the Internet to work, deal with the problems encountered in the work, this has improved the working efficiency of people; In life, people use the Internet to shop, watch videos, check information, and so on, to facilitate our life. At work, in life, people are using the network, it can be said, without the network, people's work, Life will be extremely difficult. However, the rapid development of the Internet also brings some problems. The proliferation of pornographic and reactionary content on the Internet, the disclosure of business secrets of enterprise technical information, Employees engaged in non-work-related network entertainment activities during working hours lead to inefficient work, lack of bandwidth always lead to normal business unable to carry out. The problems related to network security have begun to attract people's attention. The emergence of network security problems has caused great economic losses to enterprises and countries. However, There is no ideal product in the market to solve the above problems. This paper designs and implements a set of audit system for content, behavior and safety. The network information audit system is referring to the Jepp information audit system, deeply convinced of the behavior management of the Internet. The Jepu Information Audit system is designed and implemented for a small part of the network behavior, mail, file transfer and other protocol content information audit system; Deeply convinced online behavior management is a set of network behavior audit and management system developed by deeply convinced company, its characteristic is that the audit of behavior is relatively fine; Chinese Tang Feng Information Audit is also a system developed for the purpose of network information audit, and the diversification of report forms is one of its characteristics. Firstly, this paper introduces the background and significance of the selected topic of this paper. This paper analyzes the development of network information audit at home and abroad, describes the content and organizational structure of the paper. Related technologies include URL matching principle DPDK packet capture technology and database encryption audit technology. Thirdly, the requirements of the system are analyzed. The main contents include: system business statements, system functional requirements analysis and system non-functional requirements. Among them, the function module includes capture package engine module, content audit module, behavior audit module and security audit module. The design and implementation of the main functional modules are introduced. Finally, the system is integrated and tested. The test results are explained in detail. The system verifies the basic functions of the system on the information audit platform. The test results show that the system adopts grasping packets, the analysis scheme is feasible, and the basic functions of the system are verified correctly. The system improves the requirements of information audit in the market and provides a strong guarantee for information security.
【學(xué)位授予單位】：西安電子科技大學(xué)
【學(xué)位級別】：碩士
【學(xué)位授予年份】：2015
【分類號】：TP393.08

【參考文獻(xiàn)】

相關(guān)期刊論文 前5條

1 田雅;李冰;張英楠;;審計信息平臺軟件測評的研究[J];電子技術(shù)與軟件工程;2015年13期

2 孔丹;馬兆豐;蔣銘;;基于云平臺的安全審計系統(tǒng)設(shè)計與實現(xiàn)[J];信息安全與通信保密;2013年10期

3 陳銳;;企業(yè)上網(wǎng)行為管理系統(tǒng)的應(yīng)用[J];廣西通信技術(shù);2010年04期

4 陳國龍,陳火旺,康仲生;基于內(nèi)容的網(wǎng)絡(luò)信息安全審計中的匹配算法研究[J];小型微型計算機(jī)系統(tǒng);2004年09期

5 王永成,沈州,許一震;改進(jìn)的多模式匹配算法[J];計算機(jī)研究與發(fā)展;2002年01期

相關(guān)碩士學(xué)位論文 前1條

1 趙玲濤;基于內(nèi)容的安全審計跟蹤算法及其應(yīng)用研究[D];上海交通大學(xué);2007年

，

本文編號：1594979