| With the continuing development of internet technology, terminal communication brings to people much convenience as well as many security issues. On one hand, it's a pressing requirement for people to know as soon as possible when some certain information related to keywords is contained in some specified computer terminal of the LAN and provide the basis for the security management and audit of control end to the terminal in the LAN; On the other hand, it's a pressing problem to correctly position the terminal that cause the security issues and provide strong and powerful support for legal disputes caused by security issues. So it's imperative to do some research on the detection of specified information in the computer terminal and develop related detective tools.This article is mainly about the research on varieties of internet technologies, including process hiding and protection, information encryption and detection, communication technology, and the design and implementation of a system which can resolve security issues and meet the requirements of security management and the need for audition in the future. The content can be roughly summed up as follows:1. Analyze on existing technologies such as process hiding and protection, information encryption and detection, and make comparison among these technologies. All the information can provide theoretic basis and technological support for the design and implementation of specific information detection system.2. The design of system structure of terminal specific information as well as the design of all the modules of the system based on the characters of illegal connection and information detection system. And there are mainly two modules: (1)service control module; (2)information detection module, which includes information collection, information encryption, internet communication, process hiding and protection.3. The implementation of terminal specific information detection system by using the DDK kernel mode and Win32 applied development mode. The main functions of the system include: (1) process hiding and protection; (2)detection and collection of specific information;(3)information encryption and decryption;(4)internet communication. |
