党政机关政务网络数据分析软件的设计与实现

发布时间：2018-05-17 10:42

本文选题：政务网络 + 数据捕获　；参考：《西安电子科技大学》2014年硕士论文

【摘要】：随着政务信息化建设飞速发展,计算机网络的应用已逐步深入政府各职能部门,从而使得政务网络存在的安全问题越来越突出。党政机关政务网络传输的都是政务及其敏感重要数据,而政务网络中使用的安全产品为国产设备,国产的防火墙、IDS和IPS系统只能用来保护来自政务网络外部的攻击,给党政机关信息网络的安全管理工作造成了很大的不便。因此,针对党政机关政务网络协议分析的迫切需要,设计一款专门用于党政机关政务网络协议分析软件来保护政务网络的安全,具有很重要的现实意义。本文首先研究了最基本的TCP/IP协议、计算机端口知识以及网络数据捕获分析的关键技术,探讨了网络数据包监控分析的相关理论与技术,从网络防护的技术角度看,对网络协议数据包进行捕获,并对数据包数据进行过滤与分析,从中发现恶意代码或非法行为,这种协议分析技术直到现在仍应用于网络安全设备。然后根据党政机关政务网络协议分析中的功能、性能、应用的需求,对软件进行了结构设计,总体分为四大基本模块:数据捕获、数据过滤、协议分析、显示存储。最后通过编程实现了政务网络数据分析软件,对该软件功能和性能进行了分析测试。测试结果表明,党政机关政务网络数据分析软件能够快速进行数据捕获,协议解析详细,结果正确,协议解析层次显示分明、内容易于理解,对于网络管理工作者来说,能及时全面地掌握和了解该网段的运行及使用情况,有力地制止了政务网络中非法或者恶意的行为。今后,在工作应用当中需进一步努力改进原有技术,加大提高捕包效率,继续增加方便实用的新功能,使界面设计更加明了简洁,形成一个强大的复合的政务网络数据分析软件。
[Abstract]:With the rapid development of government information construction, the application of computer network has gradually penetrated into the various functional departments of the government, thus making the security problems of the government affairs network more and more prominent. Party and government organizations and government networks transmit government affairs and sensitive and important data, and the security products used in government affairs networks are domestic equipment. Domestic firewalls, IDs and IPS systems can only be used to protect attacks from outside government affairs networks. To the party and government organs information network security management caused great inconvenience. Therefore, according to the urgent need of the analysis of the network protocol between the Party and government organs, it is of great practical significance to design a software specially used for the analysis of the network protocol of the party and government organs to protect the security of the government affairs network. This paper first studies the most basic TCP/IP protocol, the knowledge of computer port and the key technology of network data capture and analysis, and discusses the relevant theory and technology of network data packet monitoring and analysis, from the point of view of network protection technology. The network protocol data packet is captured, and the packet data is filtered and analyzed to find malicious code or illegal behavior. This protocol analysis technique is still applied to network security devices. Then according to the function, performance and application requirements of the network protocol analysis of the party and government, the software is designed, which is divided into four basic modules: data capture, data filtering, protocol analysis and display storage. Finally, the government network data analysis software is realized by programming, and the function and performance of the software are analyzed and tested. The test results show that the party and government network data analysis software can quickly capture the data, the protocol analysis is detailed, the results are correct, the protocol analysis level is clear, the content is easy to understand, for network management workers, It can grasp and understand the operation and usage of the network segment in a timely and comprehensive way, and can effectively stop the illegal or malicious behavior in the government affairs network. In the future, we should make further efforts to improve the original technology, increase the efficiency of packet capture, continue to increase the convenient and practical new functions, and make the interface design more clear and concise. Form a powerful complex government network data analysis software.
【学位授予单位】：西安电子科技大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.08

【相似文献】