Study On The Content-Based Network Security Monitoring Model And Its Key Technology

With the rapid growth of Internet, our life is tied to Internet more and more tightly. Governments, companies, and even individuals rely on Internet to communicate with others. Internet is now an indispensable element of our everyday life.However, new challenges are posed to the network's security. We need to be confident that Internet can sustain the normal communication demands of billions of people on the earth. Only when we can know what is happening on the network can we control and manage the network. Otherwise, when the network fails, we may not do anything to restore its functionality. So being able to identify what is happening on the network becomes an important aspect of network research.Content-Based Network Security Monitoring System (CBNSMS) would be an specialized system which analyze, audit and monitor the network's information content and the behaviors. At present, the research on CBNSMS is an hotspot in the field of network security, lots of key technology are still in their childhood at home and abroad. Supported by the Ministry of Information Industry, the Ministry of Public Security and Sichuan Province, we did a lot of research on CBNSMS, including architecture, software design, data capture, load balancing, application protocol analysis, string matching, and data mining,and so on.The main contributions of this dissertation are as follows:1. The structured mode, data exchange model and management mode are put forward for CBNSMS .In structured mode, CBNSMS is partitioned into five layer, every task and procedure is scheduled and controlled parallel through message mechanism among the layers, and information capture.management, storage, maintenance is also provided; In data exchange model, CBNSMS is divided into different data areas, the data communication and exchange is implemented through data exchange area; In management model, each part of CBNSMS is managed in distributed way.and can be used in computation and communication task of CBNSMS.2. A new data distributing and data balancing algorithm is proposed. As network technology presses forward, Gigabit Ethernet (1000 Mbps) has...