基于网络数据包的邮件还原技术研究  

Research on Mail Restore Based on Network Packets

作　　者：吴勋[1] 刘嘉勇[1] 

机构地区：[1]四川大学信息安全研究所,四川成都610064

出　　处：《通信技术》2011年第4期124-126,共3页Communications Technology

摘　　要：电子邮件已经成为互联网上最流行的应用之一,然而与之相关的网络安全问题也接踵而来。为了有效控制和阻止不良信息的传播、机密信息的泄露和垃圾邮件的泛滥,首先需要建立一个系统对电子邮件内容进行还原。首先分析了电子邮件的格式及其实现原理,然后利用Libnids开发包提供的数据包捕获与过滤,TCP数据流重组的功能,设计了一个基于网络数据包的邮件还原系统,以达到对电子邮件进行网络监视的目的。E-mail becomes one of the most popular applications over the Internet,and however,the relevant network security issues come one after another,a lots of bad informations and confidential informations are spread or leaked via E-mail,and so many spams appear in the mailboxes.In order to control and deter those conditions above,a system should be established first,thus to restore the E-mail content.This paper analyzes the format and the implementation principle of the E-mail,then with the functions of capturing and filtering the packets,and reassembling the TCP stream,which are provided by Libnids development toolkit,a mail restore system based on network packets is designed,for network monitoring of the E-mail.

关 键 词：电子邮件 LIBNIDS TCP数据流重组 邮件还原 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]