基于NDIS中间层驱动的网络内容过滤关键技术研究

发布时间：2018-08-25 11:26

【摘要】：现如今,网络已经成为人们不可或缺的一部分,互联网技术的快速发展使得人们在虚拟的网络世界上访问信息变得越来越方便,同时也使得互联网上的信息越来越繁杂,有害信息急剧增多,网络安全事态日趋严重。为了解决互联网飞速发展带来的充斥于网络的不良言论、不健康信息和恶意内容等,网络内容过滤技术应运而生,网络内容过滤技术可以过滤互联网上的不健康信息,也就是对进出网络的数据包进行关键字扫描,检测是否含有恶意内容,从而合理规范网络资源,达到提高网络安全的目的。但是,日益壮大的网络规模和庞大的网络流量带给了网络信息安全巨大的挑战。本文重点研究的是网络内容过滤技术,通过对网络信息内容的合法性判别审查,禁止网络用户访问不健康网络信息。本文研究并设计出一种基于NDIS中间层驱动的网络内容过滤系统,该系统采取基于链路层的方法进行数据包的截获,NDIS是Windows网络驱动程序接口规范,它横跨OSI七层模型中的传输层、网络层和数据链路层,可以截取到所有流经网卡的数据包;然后将抓取到的数据包进行协议还原处理,经过逐层还原之后提取到应用层的数据信息,用于后续的网络内容过滤匹配。此外,本文提出了一种高效的模式匹配改进算法,此算法提高了匹配效率,且性能高效,系统通过此算法对提取到的应用层数据信息进行过滤,以此提高网络内容过滤系统的效率。为了验证本文所设计的系统和算法的有效性,本文在Windows平台下对系统进行了测试,经过实验验证,表明本文所设计的网络内容过滤系统在Windows平台上运行良好,且可以很好地完成网络不良信息内容的过滤,匹配效率得到了较好的提升。
[Abstract]:Nowadays, the Internet has become an indispensable part of people, the rapid development of Internet technology makes it more and more convenient for people to access information in the virtual network world, but also makes the information on the Internet more and more complicated. The harmful information increases sharply, the network security situation becomes more and more serious. In order to solve the problem of unhealthy speech, unhealthy information and malicious content brought about by the rapid development of the Internet, the network content filtering technology emerges as the times require, and the network content filtering technology can filter unhealthy information on the Internet. In other words, the data packets entering and leaving the network are scanned by keywords to detect whether they contain malicious content, so that the network resources can be reasonably standardized and the network security can be improved. However, the growing scale of network and huge network traffic bring huge challenges to network information security. This paper focuses on the technology of network content filtering. By examining the legality of network information content, we prohibit network users from accessing unhealthy network information. This paper studies and designs a network content filtering system based on NDIS intermediate layer driver. This system adopts link-layer method to intercept data packets. It is the interface specification of Windows network driver. It spans the transport layer in the seven-layer model of OSI. The network layer and the data link layer can intercept all the packets flowing through the network card; then, the captured data packets are processed by protocol restoration, and the data information of the application layer is extracted after layer by layer restore. For subsequent web content filtering matching. In addition, this paper proposes an efficient pattern matching improved algorithm, which improves the matching efficiency and performance. The system filters the extracted application layer data information through this algorithm. In order to improve the efficiency of the network content filtering system. In order to verify the effectiveness of the system and algorithm designed in this paper, the system is tested on the Windows platform. The experimental results show that the network content filtering system designed in this paper works well on the Windows platform. And the filtering of network bad information content can be completed well, and the matching efficiency has been improved.
【学位授予单位】：天津理工大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP393.08

【相似文献】