基于探针技术的网络安全审计系统

【目的】为适应大规模网络环境和网络快速发展的需求,对网络系统进行全面深层次的审计分析,掌握网络系统的安全状况,增强安全防范能力。【方法】利用探针(sniffer)技术实时采集网络数据包并进行关联分析,结合C/S和B/S模式架构的优点来实现网络安全审计系统的设计。【结果】基于探针技术的C/S和B/S混合架构的网络安全审计系统能对互联网的各种行为提供有效的安全审计。【结论】该系统对网络数据包的安全审计效果良好,有一定的实用价值。

Network Security Audit System Based on Sniffer Technology

Objective]To meet the needs of large-scale network environment and the rapid de-velopment of the network,establish a comprehensive and in-depth audit analysis to the net-work system,monitor the security situation of the network system,and enhance security ca-pabilities.Methods]The network security audit system was designed by using the related a-nalysis of network data package through sniffer technology and the advantages of C/S and B/S architecture pattern.Results]The results show that the system through the analysis of real-time network packets obtained by sniffer technology,and the C/S and B/S mixed archi-tecture pattern,can provide effective security audit to the Internet actions.Conclusion]The effect of network security audit system based on C/S and B/S mixed architecture pattern and sniffer technology on the audit security of the network packets is effective with practical val-ue.