Distributed Linux Host Behavior Monitoring System Design And Implementation

Along with the rapid development of computer networks, global communications with widespread open net environments have became the dominant trend in the future. There are inevitably some potential security problems that make security problems of network become a focus of attention and research while the Internet is providing open or share resources. According to a majority of computer security statistics, internal users commit over 80 percent of all computer related fraud. Now The Chinese government gives immense support for setting Linux standard and offers favorable policy for the Linux, so an intranet security product fit for Linux system is needed.On the basis of the P2DR network security model, the paper discusses design and implementation of the Distribute Linux Behavior Monitor & Audit System (for short DLBAMS). In the inner network, DLBAMS monitors the behaviors of network based on the centralized management and distributed control, and provide the audit for the behaviors.The research work mentioned in the paper is mainly about:(1) It analyzes the problems and solutions of network security generally,(2) It discusses the P2DR network security model and theory system. From the aspects of protecting, detecting and responding it discusses that DLBAMS protects wholly data resources and DLBAMS provides the speedy responding and good security performance;(3) It describes the design and implement ion of DLBAMS, which comprises the function design, logical framework, communications protocol and implementation of pivotal modules, which also discusses the security and efficiency of DLBAMS;(4) It describes the function test, stability test and capability test and test result analysis.