基于数字标识的敏感文件监控研究与实现  

Research and implementation of terminal confidential file monitor based on digital label

作　　者：李国勇[1] 刘嘉勇[1] 肖丰霞[1] 

机构地区：[1]四川大学电子信息学院,四川成都610064

出　　处：《成都信息工程学院学报》2008年第2期165-168,共4页Journal of Chengdu University of Information Technology

摘　　要：通过对系统剪贴板和网络出口数据的监控实现了终端系统敏感电子文件的监控。敏感电子文件由数字标识来标记,它指明了文件的密级和用户使用权限。采用Winpcap捕包机制并结合BM特征串模式匹配算法准确地监控网络出口数据。通过轮询剪贴板中的文件列表来监控系统的文件拷贝操作。实验表明,终端用户对敏感文件的非法操作系统都可以准确地监控并保存日志记录。The terminal oonfidential files are protected by the system clipboard monitor and outgoing packed monitor. The oonfidential files am marked digitally which indicates the level of the specified file and the privilege of the user to access. The predsion of the packet monitor is improved by high performance of Winpcap packet capturing and BM pattern-match algorithm. The file-oopy operation monitor is realized by the system clipboard monitor. The experiment shows that all te4rminal users＇ unauthorized operations of the oonfidential files am logged in term of the log files.

关 键 词：终端监控 数字标识 剪贴板监控 WINPCAP BM算法 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]