Distributed Network Behavior Monitoring System Design And Implementation

Along with network technology application popularization, more and more enterprises and government units have built their inner LAN. The inner LAN is "half sealed", so the network security events happened in the inner LAN are pervading from the inside to the outside.The major existing network behavior monitoring systems are used as the management tool in inner LAN, the managers use this system to manage and restrict the workers's network behavior, but lack to the virus and Troy horse's monitoring, or monitoring insufficient. The nerwork behavior monitoring system as a network security product must be able to monitor the inner LAN's users and the virus and Troy horse. The nerwork behavior monitoring system monitoring the inner LAN users mainly aims at their network behavior;monitoring the virus and Troy horses mainly aims at their behavior feature.Based on the current network behavior monitoring technology and the Troy horse's developement situation, this paper have designed and implemented a distributed network behavior monitoring system.The research work mentioned in the paper is mainly about:(1) Researched the development of the network behavior monitoring technology and Troy horse technology.(2) Studied the windows operating system network system structure, the network data filtering technology, the process and remote thread creating mechanism, procedure automic starting and the anti-removed technology(3) It describes the design and implement ion of the distributed network behavior monitoring system, detailed describes the the system frame design, the function design, the communication protocol, the principle and method of core modules implement and the system function tests.(4) Carried on to the system tests and analyzes.(5) At last proposed further goal and direction.