Design And Implementation Of Telecom Information Audit System

Aiming at the information audit requirements of telecom enterprise business system which is built on the way of webpages accessing background databases, the telecom information audit system is proposed. Through bypass interception, the system can audit login details, complete transaction operations, etc of database operators, detect operation behaviors of stuffs in the business systems, and locate the specific positions of operators. Thereinto, by analyzing intercepted data packets, the achievements of database communication protocol analysis and webpage reproducing can be applied to other information systems.Firstly, a research on related technologies which are based on the application of information audit system, like technologies of protocol analysis and protocol restore, is carried out. I make research on protocol analysis of TNS(Transparence Network Substrate) data transfer protocol in Oracle database, and find the instruction characteristics of TNS datagram, then restore the context of the datagrams that have already been analysed and form complete transaction logic. I parse the HTTP(Hyper Text Transfer Protocol) data packets and reproduce webpages that stuffs have visited, then store the source IP address, URL(Uniform Resource Locator) of these webpages, HTTP request information, staff ID, etc. The related web resources layouts on the web servers can be seen clearly. Secondly, according to the methods of software engineering, I describe the requirements analysis and design of the system, then implement the functions of retrieving and warning operation behaviors of database operators and stuffs. On the basis of these, the HTTP analysis and restore module, the TNS protocol analysis and restore module are tested in pratical environment, the efficiency of parsing data packets files is also obtained.The system can process data packets files of HTTP, TNS protocol efficiently, its functions include combination query, rules configuration and abnormal warning. The protocol analysis and restore module has been installed to the system architecture which uses FastDFS as the distributed file system, Mongo DB as the database, Spark as the distributed computing framwork in pratical environment, and it has good operation efforts.