职业技术学院网络行为管理系统的设计与实现

发布时间：2018-04-25 00:05

本文选题：网络行为 + 数据搜集　；参考：《电子科技大学》2016年硕士论文

【摘要】：网络行为管理系统(Network Behavior Management System)是一种保障网络信息活动安全的重要技术平台。与传统的防火墙、漏洞扫描、入侵检测等安全措施相比,有效促进了用户网络行为的实时管控,突出了网页访问过滤、网络应用控制、带宽流量管理、信息内容审计、用户行为分析等亮点,因而近年来,系统不仅广泛应用在政务、金融、通信、网络等行业,还逐步延伸应用到国防、军事、航空、航天、教育、交通、建筑、医疗、卫生、制造等领域,其旁路监听模式、Libpcap数据搜集技术成为了当前国内外网络安全研究领域的技术热点。论文在四川建筑职业技术学院院级立项课题的研究背景下,采用B/S结构的架构方式和旁路监听模式的部署方式,使用C++开发语言,应用CodeLite集成开发环境、G++编译工具、GDB调试工具、MySQL数据库等开发工具完成了系统的研发,详细的研究思路、方法、过程、内容、结论及成果作如下整理总结。1.完成调研并掌握了系统及技术的国内外研究现状和发展趋势,对比分析了系统的C/S和B/S架构方式,总结说明了系统的网桥、网关、旁路监听等部署模式的工作原理和特点,对系统的主流技术进行了研究和归理。2.通过对用户网络行为、网络流量等学院网络应用现状的分析,总结提出了系统在功能与性能方面的需求;并据此对系统的总体结构、模块结构以及数据库进行了设计,对比、分析、确定了系统应用的开发工具类型。3.设计并论证了性能、安全性、稳定性等系统的技术与应用指标,制定出了系统实现的总体实施方案,并对系统实现的可行性进行了分析和说明。4.对数据处理子系统中的数据搜集、协议分析等模块,以及控制管理子系统中的系统配置、行为控制、内容过滤、流量监控、日志维护等核心模块的功能,以及数据搜集技术、协议分析技术等系统研发的关键技术进行了具体设计与实现。5.比照系统的真实应用环境,搭建了相应的测试环境,并测试、验证了系统的系统配置、行为控制、内容过滤、流量监控、日志维护、数据搜集、协议分析等核心模块的功能,以及系统的数据处理速度、服务器稳定性等主要性能指标。本论文的研究,完成了课题的研究目标,取得实际的研究成果。该系统可从整体上解决数据高速采集、协议应用准确识别、用户网络行为管理、用户身份识别和信息查询、数据异地备份等系列的技术问题,具有良好应用价值。
[Abstract]:Network Behavior Management system is an important technical platform to guarantee the security of network information activities. Compared with traditional firewall, vulnerability scanning, intrusion detection and other security measures, it can effectively promote real-time control of user's network behavior, highlight web page access filtering, network application control, bandwidth traffic management, information content audit, etc. In recent years, the system has been widely used not only in government affairs, finance, communications, network and other industries, but also in national defense, military, aviation, aerospace, education, transportation, construction, medical, health, etc. In manufacturing and other fields, the data collection technology of LIBPcap has become a hot spot in the field of network security research at home and abroad. Under the background of the research on the project of Sichuan Institute of Architecture and Technology, this paper adopts the structure of B / S structure and the deployment of bypass listening mode, and uses C language. The development tools such as CodeLite integrated development environment and CodeLite debugging tool are used to complete the research and development of the system. The detailed research ideas, methods, processes, contents, conclusions and results are summarized as follows. 1. The current situation and development trend of the system and technology at home and abroad have been studied and mastered. The construction methods of C / S and B / S of the system have been compared and analyzed. The working principles and characteristics of the deployment modes of the system, such as bridge, gateway, bypass listening and so on, have been summarized and explained. The mainstream technology of the system has been studied and analyzed. 2. 2. By analyzing the current situation of network application in colleges such as user network behavior and network traffic, this paper summarizes and puts forward the requirements of the system in function and performance, and then designs the overall structure, module structure and database of the system. The development tool type of system application. 3. 3. The technical and application indexes of the system, such as performance, security and stability, are designed and demonstrated. The overall implementation scheme of the system is worked out, and the feasibility of the system implementation is analyzed and explained. The functions of the core modules, such as data collection, protocol analysis, and control management subsystem, such as system configuration, behavior control, content filtering, flow monitoring, log maintenance, and data collection technology, are discussed. Protocol analysis technology and other key technologies of system development are designed and implemented. 5. Comparing with the real application environment of the system, the corresponding test environment is built, and the functions of the system's core modules, such as system configuration, behavior control, content filtering, traffic monitoring, log maintenance, data collection, protocol analysis, etc, are tested and verified. And the system data processing speed, server stability and other main performance indicators. The research of this paper has completed the research goal of the subject and obtained the actual research results. The system can solve the technical problems of high-speed data collection, accurate identification of protocol application, user network behavior management, user identification and information query, data backup and so on. It has good application value.
【学位授予单位】：电子科技大学
【学位级别】：硕士
【学位授予年份】：2016
【分类号】：TP311.52

【参考文献】