Electric Material Evidence Abstraction Method Research And Implement For Using Proxy Servers To Access Particular Websites

With the rapid development of network technology and the popularity of the network environment, more and more security risks appear on internet. When the traditional monitoring technology based on IP address monitoring can not meet the demand of information security in network monitoring, the research of monitoring technology is becoming more and more important. Using proxy server to access particular websites is one of the most common methods of escaping network supervision. We can obtain material evidence for using proxy servers to access particular websites by Wireshark so that we can help deter cybercrime. The aim of this paper is to invent a network monitoring system which is a set of capturing packet, protocol analysis information retrieval, digital signature based on Wireshark.This paper takes the famous software Wireshark which is a tool of protocol analysis as research subject, analyzes the structure of the system, working process, technology of plug-in and describes the framework of the whole system and the specific applications. It discusses specially how to carry on the second-development to Wireshark by it's flexible plug-in mechanism and make the system to be a set of capturing packet, protocol analysis information retrieval, digital signature. This paper discusses how to use database and digital signature based on RSA taking Wireshark http protocol plug-in as a point of penetration in detail.In addition, this paper describes the improvement idea of the monitoring system. What's more, it looked forward to the prospect of the system at last.