基于网络信息安全内容审计系统及相关技术研究

伴随着国家信息化不断推进和计算机网络飞速发展,网络信息安全内容审计(CASNI)成为了网络信息安全中不可或缺的重要组成部分.网络信息安全内容审计从网络关键点收集数据包,对其传送的内容进行审计分析,达到网络信息内容可控.本文描述了一种在高速网络环境下分布式、可扩展的高性能网络审计体系结构,分析了Linux(操作系统)捕获数据包的瓶颈,重点论述了使用NAPI (New Application Program Interface)技术和内存映射技术提高数据包捕获,解决审计系统中数据流高速处理的问题.

Research on Content Audit of Security for Network Information and Its Correlative Technology

With advance of information-based nation and fast development of computer network,content audit of security for Network Information(CASNI) is a very indispensably important part of security for Network Information.CASNI collects data packages from network key points and analyzes the contents of transporting packages to control information in the whole network.Now,this paper describes architecture for distributed,extensible and high-performance network audits in high-speed network.The highlight is the improved data packet capture with NAPI technology and memory mapping technology to solve the problem of processing data stream in high speed in the audit system.A practical system based on the theories and contents about this paper has been constructed.Now,a whole audit system has been launched into practice,and the performance is very well.