Network Information Monitoring And Forensics System Analysis And Design

With the increasing network application's diversity and complexity, the management of security content and behavior becomes more and more important. Accordingly, the security content management plays a more important role in the general security architecture. Networking security audit product is one of the core methods in the security content management. It becomes an effective tool to manage the network behaviors and prevent internal secret information from leaking out.The paper describes the process of analysis, architecture and design of the network monitoring and evidence preserving system (NetMointor), and supplies a blueprint for the future advanced system in this area. By analyzing the domestic and international current situation, this paper defines the requirements of the project, soon gives an architecture model to suit for the main quality attribute. Finally, this paper designs the concrete implementation method for the architecture model.Base on the analysis and design, we are successfully designs and develops a security content management product, which is proved that the analysis are suitable and product design are feasible in terms of strict function and performance testing.