摘要
针对目前内部信息安全问题,在深入研究各种网络协议的基础上,提出了一种实用性较强的网络审计模型。本文介绍了网络审计系统的设计和实现方法,深入探讨数据包获取和协议的解析还原技术,通过解析和还原各种网络协议,实现了对网络信息的内容的获取和存储。经测试该系统能为公司和企业提供一种很好的网络监控平台。
On the basis of studying network protocols and In order to solve the problem of security of internal network, a Net Audit System was designed and implemented. This text presents how to design a Net Audit System. It also introduce the technology of how to capture net packets and the technology of how to analysis and restore net protocols. Though analysis and restore variety net protocols, the system can get and save the content of packets. The test proved that the system can provide a good platform of net monitoring for enterprises and companies.
出处
《微计算机信息》
2009年第30期72-73,共2页
Control & Automation
基金
基金申请人:王旭仁
项目名称:千兆网信息获取
监控和智能安全分析系统研究
基金颁发部门:北京市科学技术委员会(20070B61)
关键词
网络安全
网络审计
协议解析
winpcap库
多线程
Network security
network auditing
analysis protocols
winpcap library
Multi-threaded