職業(yè)技術(shù)學(xué)院網(wǎng)絡(luò)行為管理系統(tǒng)的設(shè)計與實現(xiàn)
本文選題:網(wǎng)絡(luò)行為 + 數(shù)據(jù)搜集 ; 參考:《電子科技大學(xué)》2016年碩士論文
【摘要】:網(wǎng)絡(luò)行為管理系統(tǒng)(Network Behavior Management System)是一種保障網(wǎng)絡(luò)信息活動安全的重要技術(shù)平臺。與傳統(tǒng)的防火墻、漏洞掃描、入侵檢測等安全措施相比,有效促進了用戶網(wǎng)絡(luò)行為的實時管控,突出了網(wǎng)頁訪問過濾、網(wǎng)絡(luò)應(yīng)用控制、帶寬流量管理、信息內(nèi)容審計、用戶行為分析等亮點,因而近年來,系統(tǒng)不僅廣泛應(yīng)用在政務(wù)、金融、通信、網(wǎng)絡(luò)等行業(yè),還逐步延伸應(yīng)用到國防、軍事、航空、航天、教育、交通、建筑、醫(yī)療、衛(wèi)生、制造等領(lǐng)域,其旁路監(jiān)聽模式、Libpcap數(shù)據(jù)搜集技術(shù)成為了當(dāng)前國內(nèi)外網(wǎng)絡(luò)安全研究領(lǐng)域的技術(shù)熱點。論文在四川建筑職業(yè)技術(shù)學(xué)院院級立項課題的研究背景下,采用B/S結(jié)構(gòu)的架構(gòu)方式和旁路監(jiān)聽模式的部署方式,使用C++開發(fā)語言,應(yīng)用CodeLite集成開發(fā)環(huán)境、G++編譯工具、GDB調(diào)試工具、MySQL數(shù)據(jù)庫等開發(fā)工具完成了系統(tǒng)的研發(fā),詳細的研究思路、方法、過程、內(nèi)容、結(jié)論及成果作如下整理總結(jié)。1.完成調(diào)研并掌握了系統(tǒng)及技術(shù)的國內(nèi)外研究現(xiàn)狀和發(fā)展趨勢,對比分析了系統(tǒng)的C/S和B/S架構(gòu)方式,總結(jié)說明了系統(tǒng)的網(wǎng)橋、網(wǎng)關(guān)、旁路監(jiān)聽等部署模式的工作原理和特點,對系統(tǒng)的主流技術(shù)進行了研究和歸理。2.通過對用戶網(wǎng)絡(luò)行為、網(wǎng)絡(luò)流量等學(xué)院網(wǎng)絡(luò)應(yīng)用現(xiàn)狀的分析,總結(jié)提出了系統(tǒng)在功能與性能方面的需求;并據(jù)此對系統(tǒng)的總體結(jié)構(gòu)、模塊結(jié)構(gòu)以及數(shù)據(jù)庫進行了設(shè)計,對比、分析、確定了系統(tǒng)應(yīng)用的開發(fā)工具類型。3.設(shè)計并論證了性能、安全性、穩(wěn)定性等系統(tǒng)的技術(shù)與應(yīng)用指標,制定出了系統(tǒng)實現(xiàn)的總體實施方案,并對系統(tǒng)實現(xiàn)的可行性進行了分析和說明。4.對數(shù)據(jù)處理子系統(tǒng)中的數(shù)據(jù)搜集、協(xié)議分析等模塊,以及控制管理子系統(tǒng)中的系統(tǒng)配置、行為控制、內(nèi)容過濾、流量監(jiān)控、日志維護等核心模塊的功能,以及數(shù)據(jù)搜集技術(shù)、協(xié)議分析技術(shù)等系統(tǒng)研發(fā)的關(guān)鍵技術(shù)進行了具體設(shè)計與實現(xiàn)。5.比照系統(tǒng)的真實應(yīng)用環(huán)境,搭建了相應(yīng)的測試環(huán)境,并測試、驗證了系統(tǒng)的系統(tǒng)配置、行為控制、內(nèi)容過濾、流量監(jiān)控、日志維護、數(shù)據(jù)搜集、協(xié)議分析等核心模塊的功能,以及系統(tǒng)的數(shù)據(jù)處理速度、服務(wù)器穩(wěn)定性等主要性能指標。本論文的研究,完成了課題的研究目標,取得實際的研究成果。該系統(tǒng)可從整體上解決數(shù)據(jù)高速采集、協(xié)議應(yīng)用準確識別、用戶網(wǎng)絡(luò)行為管理、用戶身份識別和信息查詢、數(shù)據(jù)異地備份等系列的技術(shù)問題,具有良好應(yīng)用價值。
[Abstract]:Network Behavior Management system is an important technical platform to guarantee the security of network information activities. Compared with traditional firewall, vulnerability scanning, intrusion detection and other security measures, it can effectively promote real-time control of user's network behavior, highlight web page access filtering, network application control, bandwidth traffic management, information content audit, etc. In recent years, the system has been widely used not only in government affairs, finance, communications, network and other industries, but also in national defense, military, aviation, aerospace, education, transportation, construction, medical, health, etc. In manufacturing and other fields, the data collection technology of LIBPcap has become a hot spot in the field of network security research at home and abroad. Under the background of the research on the project of Sichuan Institute of Architecture and Technology, this paper adopts the structure of B / S structure and the deployment of bypass listening mode, and uses C language. The development tools such as CodeLite integrated development environment and CodeLite debugging tool are used to complete the research and development of the system. The detailed research ideas, methods, processes, contents, conclusions and results are summarized as follows. 1. The current situation and development trend of the system and technology at home and abroad have been studied and mastered. The construction methods of C / S and B / S of the system have been compared and analyzed. The working principles and characteristics of the deployment modes of the system, such as bridge, gateway, bypass listening and so on, have been summarized and explained. The mainstream technology of the system has been studied and analyzed. 2. 2. By analyzing the current situation of network application in colleges such as user network behavior and network traffic, this paper summarizes and puts forward the requirements of the system in function and performance, and then designs the overall structure, module structure and database of the system. The development tool type of system application. 3. 3. The technical and application indexes of the system, such as performance, security and stability, are designed and demonstrated. The overall implementation scheme of the system is worked out, and the feasibility of the system implementation is analyzed and explained. The functions of the core modules, such as data collection, protocol analysis, and control management subsystem, such as system configuration, behavior control, content filtering, flow monitoring, log maintenance, and data collection technology, are discussed. Protocol analysis technology and other key technologies of system development are designed and implemented. 5. Comparing with the real application environment of the system, the corresponding test environment is built, and the functions of the system's core modules, such as system configuration, behavior control, content filtering, traffic monitoring, log maintenance, data collection, protocol analysis, etc, are tested and verified. And the system data processing speed, server stability and other main performance indicators. The research of this paper has completed the research goal of the subject and obtained the actual research results. The system can solve the technical problems of high-speed data collection, accurate identification of protocol application, user network behavior management, user identification and information query, data backup and so on. It has good application value.
【學(xué)位授予單位】:電子科技大學(xué)
【學(xué)位級別】:碩士
【學(xué)位授予年份】:2016
【分類號】:TP311.52
【參考文獻】
相關(guān)期刊論文 前10條
1 閆效鶯;趙文東;蔣騰;陶云;;基于局域網(wǎng)的上網(wǎng)行為管理系統(tǒng)設(shè)計與實現(xiàn)[J];自動化技術(shù)與應(yīng)用;2016年04期
2 陳家才;邵博;張宇飛;;上網(wǎng)行為管理系統(tǒng)在企業(yè)中的應(yīng)用價值和實現(xiàn)方式[J];中國新通信;2016年03期
3 吳國祖;王洪波;;基于上網(wǎng)行為管理系統(tǒng)的研究與應(yīng)用[J];電子技術(shù)與軟件工程;2015年17期
4 安計勇;侯效禮;;網(wǎng)絡(luò)監(jiān)控系統(tǒng)的設(shè)計與實現(xiàn)[J];計算機應(yīng)用與軟件;2015年01期
5 王國軍;袁婷;;大學(xué)生日常行為管理系統(tǒng)設(shè)計與實現(xiàn)[J];電子測試;2015年01期
6 包捷;呂智慧;華錦芝;張凌毅;吳承榮;;私有云環(huán)境下安全審計系統(tǒng)的設(shè)計與實現(xiàn)[J];計算機工程與設(shè)計;2014年11期
7 竇琨;;校園網(wǎng)上網(wǎng)行為管理系統(tǒng)應(yīng)用分析[J];價值工程;2014年29期
8 李權(quán);錢朝陽;;內(nèi)網(wǎng)行為管理系統(tǒng)的設(shè)計及實現(xiàn)[J];數(shù)字技術(shù)與應(yīng)用;2014年07期
9 趙艷;;校園網(wǎng)絡(luò)行為管理系統(tǒng)的研究與設(shè)計[J];無線互聯(lián)科技;2013年07期
10 魏浩;陳性元;王超;杜學(xué)繪;;一種基于數(shù)據(jù)流分析的網(wǎng)絡(luò)行為檢測[J];計算機應(yīng)用研究;2013年12期
相關(guān)碩士學(xué)位論文 前6條
1 金川涵;金華職業(yè)技術(shù)學(xué)院畢業(yè)環(huán)節(jié)信息管理系統(tǒng)的設(shè)計與實現(xiàn)[D];電子科技大學(xué);2015年
2 馬曉東;校園網(wǎng)上網(wǎng)行為管理控制系統(tǒng)設(shè)計[D];河北科技大學(xué);2014年
3 徐恒;浙江警察學(xué)院網(wǎng)絡(luò)監(jiān)控系統(tǒng)的設(shè)計與實現(xiàn)[D];電子科技大學(xué);2014年
4 劉欣;**醫(yī)院上網(wǎng)行為管理系統(tǒng)設(shè)計與實現(xiàn)[D];山東大學(xué);2013年
5 蔣蔚;網(wǎng)絡(luò)行為管理系統(tǒng)研究及設(shè)計[D];浙江工業(yè)大學(xué);2012年
6 米增;程序在線評測輔助教學(xué)系統(tǒng)的研究與開發(fā)[D];內(nèi)蒙古師范大學(xué);2009年
,本文編號:1798854
本文鏈接:http://sikaile.net/kejilunwen/ruanjiangongchenglunwen/1798854.html