Research On Design And Implementation Of Network Blackbox System

With the growing of network application, it arouses more and more attention about the potential safety hazard brought by using it. However, the traditional defense methods cannot satisfy the demands of modern information network. More network managers find that all kinds of security schemes can do nothing when they face destroy information changing quickly. This paper brings forward a new network security scheme-Network Blackbox System. This system abandons the old strategy which is based on defense and is less effective, carrying out the active information recording instead of the passive defense. These important data are saved timely and reliably, so they become the first choice resources for the tolerance disaster, accident analysis of network system. Network Blackbox System's main function is to record knocking information of keyboard and mouse, reading and writing states of system disk, opening and closing states of system, sending and receiving datagram on network. Network Blackbox System's function also includes information reappearance, information analyse and data recovery.Firstly, this article analyzes current network security schemes, and then it designs the whole Network Blackbox's framework by combining the advantage of those technologies and function demand of this system itself. After studying corresponding key technology, it designs and realizes them. Finally, it gives realizing codes about some modules.