摘要
文章给出了一种BBS监听与检测的实现方案。该系统由底层捕包,重组过滤和二次分析检索三部分分布实现。底层捕包采用winpcap以过滤大部分的无用数据。重组过滤只将论坛文本信息还原并在剔除干扰字符的基础上采用平衡二叉树进行关键字匹配进一步过滤合法文本,提高了系统性能较少丢包率。二次分析检索对捕获的非法信息进行帐密检测并根据其帐密触发安全响应。
A scheme of the BBS intercepting and detecting system is given in this paper. This consists of packet capture module, reconstruct and filter module and second analysis and detection module. Packet capture module is based on winpcap and filters most of useless data. Reconstruct and filter module recovers all text in the forum and eliminates interferential words to improve the capability and reduce the losing packet rate. Second analysis and detection module searches the username and password from the text to confirm the lawless degree and alarms the administrator.
出处
《自动化技术与应用》
2006年第11期13-15,29,共4页
Techniques of Automation and Applications
基金
厦门大学信息985二期创新平台项目
