基于Netfilter的万兆网络监测系统的研究与设计

发布时间：2018-05-06 18:30

本文选题：网络监测 + 信息安全　；参考：《长江大学》2017年硕士论文

【摘要】：网络监测系统是网络信息安全系统的一个重要组成部分,它是对其他网络信息安全技术重要的补充。网络监测系统通过监听整个网络的数据包,可以对网络数据包进行查看、拆分以及分析数据的内容,可有效监测所在网络的运行情况。随着互联网技术的快速发展和社会信息化的深入发展以及网络应用的普及,互联网的规模发生着爆炸式的增长。但是伴随着网络技术的发展,网络自身也面临着各种各样的威胁或者企业内部数据的泄露问题。因此,在网络信息安全方面需要一个强有效的网络监测系统,才能有效的监测网络的运行状况以及网络中用户的网络行为,并通过对网络通信的数据的过滤处理,再进行相关协议分析和恢复,获取网络通信数据,从而可以加强对网络的监测并提高网络的安全性。基于Netfilter的万兆网络监测系统首先对高速网络流量进行均衡处理,然后在后台通过对底层网络流量数据包进行捕获和分析,把处理后的网络数据内容存放到MySQL数据库中。基于底层网络数据解析之上开发一套相应的客户端管理系统。该管理系统采用B/S架构,利用当前热门的Web研发相关技术,设计了一整套相关的管理系统,通过该管理系统,管理人员能方便的查看网络中各种行为数据。管理系统包括权限管理、网络数据可视化、网络监控、网络预警等相关功能,这些功能能够使管理人员更加全面的了解系统底层得到的网络流量数据的具体情况。由于该系统基于B/S架构,使得该管理系统可以运行在Windows和Linux两大主流的操作系统,系统界面设计友好、简洁,功能较全。
[Abstract]:Network monitoring system is an important part of network information security system, it is an important supplement to other network information security technology. The network monitoring system can view, split and analyze the data packets by listening to the data packets of the whole network, and can effectively monitor the operation of the network. With the rapid development of Internet technology, the deep development of social informatization and the popularization of network application, the scale of Internet is increasing explosively. However, with the development of network technology, the network itself is also facing various threats or internal data leakage. Therefore, in the aspect of network information security, a strong and effective network monitoring system is needed in order to effectively monitor the operation of the network and the network behavior of users in the network, and through filtering and processing the data of network communication. Then the related protocol analysis and recovery can be carried out to obtain the network communication data so as to strengthen the monitoring of the network and improve the security of the network. The network monitoring system based on Netfilter firstly equalizes the high speed network traffic, and then, through capturing and analyzing the bottom network traffic data packet in the background, stores the processed network data content into the MySQL database. Based on the underlying network data analysis, a set of client management system is developed. The management system uses the B / S architecture and the popular Web technology to design a whole set of related management system. Through this management system, the managers can easily view the various behavior data in the network. The management system includes authority management, network data visualization, network monitoring, network warning and other related functions. These functions enable managers to understand the network traffic data from the bottom layer of the system more comprehensively. Because the system is based on the structure of B / S, the management system can run in Windows and Linux operating system. The interface of the system is friendly, simple and complete.
【学位授予单位】：长江大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP393.0

【相似文献】