[1]陈海涛,龚正虎,胡华平,等.基于代理的网络会话取证与监控系统[J].深圳大学学报理工版,2001,18(4):54-62.
 CHEN Hai-tao,GONG Zhen-hu,HU Hua-ping and YUE Hong.The study and Realization of Network Session Recording and Supervising System Based on Agents[J].Journal of Shenzhen University Science and Engineering,2001,18(4):54-62.
点击复制

基于代理的网络会话取证与监控系统()
分享到:

《深圳大学学报理工版》[ISSN:1000-2618/CN:44-1401/N]

卷:
第18卷
期数:
2001年4期
页码:
54-62
栏目:
出版日期:
2001-12-30

文章信息/Info

Title:
The study and Realization of Network Session Recording and Supervising System Based on Agents
文章编号:
1000-2618(2001)04-0054-09
作者:
陈海涛 龚正虎 胡华平 岳虹
国防科技大学计算机学院, 长沙 410073
Author(s):
CHEN Hai-taoGONG Zhen-huHU Hua-ping and YUE Hong
School of Computer Science National University of Defense Technology ,Changsha 410073,P.R.China
关键词:
网络会话取证代理中心监控服务器可视化
Keywords:
network sessionevidence-collected agentcenter monitoring and controlling servervisualization
分类号:
TP 393.08
文献标志码:
A
摘要:
在分析现有网络会话记录系统存在问题的墓础上, 提出一种基于代理的分布式网络会话取证和可视化监控体系结构,设计了一种新方法可巧妙实现网络会话的解析,即通过修改网络服务客户端的底层接收部分,使其不从操作系统的TCP/IP协议找获取报文数据,而是从捕获的报文中接收数据,然后从其愉出中获得解析结果.介绍了已实现的基于代理的网络会话取证和可视化监控系统的总体设计与组成,讨论了实现该系统的关键技术.
Abstract:
The recording and analyzing of network session in an important intrusion detection technology. Having analyzed the problems of the existing network session recording system, we put forward an agent-based distributed network session recording and visual supervising architecture, in which the bottom receiving part of the usual network service client software is modified to receive data from the captured packet instead of the TCP/IP stack of the OS. The design and composition of the Agent-based Network Session Recording and Visual Supervising System (ANSRVSS) is presented, and the key technology in ANSRVSS implementation is discussed.
更新日期/Last Update: 2015-11-27