一种基于流量识别技术的网络信息审计模型  

A Network Information Audit Model Based on Traffic Recognition Technology

作　　者：张秀英[1,2] 王铮[1] 

机构地区：[1]重庆大学计算机学院,重庆400044 [2]重庆警官职业学院,重庆400039

出　　处：《微处理机》2010年第1期41-44,共4页Microprocessors

基　　金：重庆警官职业学院科研项目资助(2008-15)

摘　　要：网络信息审计作为对网络行为进行事后分析的一种技术手段,被广泛应用于网络安全领域。提出一种基于流量识别技术的网络信息审计模型,讨论其中的审计信息模型、功能模型以及各功能模块的主要功能和相互关系。模型通过多种流量识别方法的综合及快速流量分类算法,细分各种网络流量,按审计信息模型转储所需审计的流量。根据控制命令,审计分析模块完成审计数据的分析并输出结果。Network information auditing, which is a technology used in post - analysing on network behaviors, is widely used in network security field. A network information auditing model based on network traffic recognition technology is proposed in this paper. The audit information model, function model and main functions of modules in this model and their relationship are discussed. In this model, different network traffics can be differented through multiple methods of traffic recognition and fast algorithm for traffic classfication. And appropriate traffics needed for auditing are stored based on the audit information model. According to the control command, audit data analysing is completed by analyse moduleand results are exported.

关 键 词：网络信息审计 流量识别 流量分类 分组重装 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]