| At present, while the network size is expanded fast and the complexity is improving constantly, having produced a large number of potential safety hazards, the online security question has already become the focus that everybody pays close attention to more and more. Safeguarding an important technology of the online security is the network monitoring. Through the analysis of network monitoring technology and principle and studying the text filtration with sensitive information, this text provides a kind of more intact solution of the network monitoring â”design and implementation of bypass monitoring system based on drawing algorithm of the characteristic of the text. This system adopts the mode that B/S combines with C/S framework, intercept the way and control and manage the network application data real-timely through the network. The analysis of performance of network monitoring, network monitoring management mode made up on the basis of B/S and C/S and drawing algorithms in text characteristic, it is a main characteristic of this text. This text has introduced the main key technology of the network monitoring at first. The network monitoring principle, TCP connects blocks technology and filtering technology with sensitive information text. It is prerequisite and foundation realizing being controlled to monitor technology, has analyzed the principle and implementation that information monitors in the radio type and exchanging type two kinds of environments carefully. Through in-depth analysis to TCP agreement inn, have put forward three kinds of blocked method that TCP connect: TCP agreement inn unusually stops dealing with, TCP agreement inn usually stops dealing with and packing the window. Analyzed and compared with the several kinds of typical technology and method to filtering information, have pointed out their one's own advantage and deficiency, and on this basis, putting forward drawing algorithms of the characteristic of the text. Secondly, proceed from the angle of improving performance of controlling, it have carried on the secondary development on the basis of winpcap and provided four main condition of restriction control the performance. Whom data gather speed, systematic expenses of what the agreement is analyzed and deal with systematically heavy thread count most and text analysis efficiency, and to each kind of situation separately, have put forward the method of optimizing and carried on comparatively detailed exposition. Then, provide the detailed design of the monitoring system of the bypass. It including two major parts makes up: Control the part subsystem and management part subsystem. It has described performance and function index from design principle at first. Then from system makeup, running environment and support platform, it explain systematic operation platform. Then has told in detail the system master plan, including overall frame and characteristic, structure of the system and workflow, described in detail finally that controls the design of each sub module of the part subsystem and management part subsystem and realizes the course, including gather the module in data, IP slice assembles and reduces module, use the agreement to reduce the module, the content text analyses the module, block the module, communication module, etc. Then, it has described the design of the text analyzer module in detail. This module has defined its interface and data attribute. It enables the text analyzer to hang and receive the monitoring system conveniently. Consider from the data real-time character of the network, having adopted the algorithm of many keyword search based on tree. The focal point lies in directing against the text with sensitive information content, analyzing and summarizing the characteristic that they appear, combine the text filtering technology, on the basis of categorized characteristic word of the theme, have proposed a kind of algorithm of calculation text susceptibility based on drawing the characteristic word, have made more ideal result. Finally, carried on brief analysis to the security of the monitoring system oneself from four respects. |
