Research And Implementation Of Network Security Audit System Based On Information Filtering

With popularity of the internet, people pays more and more attention to the information safety issue, especially the safety concern for the trusted internal networks. Therefor, security audit products appeared. In this paper, the information filtering technology is applied in content auditing, which will play a very important role on consummating theoretical direction of the safety audit system.In this paper, analysis on the current mature security audit system function showed that the current security audit system can not audit all the information, so we provide solutions based on information filtering security audit. In this solution, based on the K-nearest neighbor transformative method, the internet transferred data will be audited, the same time, the auditing area is extended, and the safety auditing accuracy rate is improved.Secondly, we research the Agent technology; network data capture technology, and Chinese word segmentation technique, feature extraction technology and text classification technology of information filtering. And we design a security audit system of distributed network based on information filtering.Finally, in accordance with system design, we realize the behavior audit in the Agent main program and data capture module in the system. We realize the Agent component of content audit. In addition, we test the security audit system in the actual environment and analysis the test result .And we test the feasibility of the proposed solutions of the text with the practical operation result.