Network Behavior Detection And Evaluation Technology Research

In today’s development of the Internet, people’s daily life become more and more go without internet, it changes people’s life style and feature, however, network security is more and more severe at the same time the internet bring us convenience, and people pay more and more attention on information security. At the moment, network security technology change rapid, the define of the network security change with people’s thinking changing and the technology improve, network security’s main task is to ensure the confidentiality of the information before, but now the main task of the network security is to study the manageability, availability, integrity, cannot deny and so on, further development to the system service security, and then many different security mechanism including firewall, intrusion detection system, virus prevention to improve the network’s safety performance.This issue is mainly to understand the relevant principle of the SNIFFER, introduce the principle and effect of the WINPCAP development kit, let the network adapter work in promiscuous mode in the process to make it capture all the packets through, and then study the packet header. Through the definition of the network behavior, know the feature of the network behavior, describe the network behavior by standardization of language and use some technology to extract network behavior through internet. After knowing the definition and description of the network behavior, the network behavior can be classified to distinguish which classify the behavior is during the capture, the result can be used for estimation. The abnormal network behavior database is designed, through which the network behavior is normal or abnormal can be distinguished. The estimation method is put forward at last, through these methods to analysis the network and give out the analysis result, then the whole net’s security can be evaluated by qualitative and quantitative...