基于数据流的启发式文件传输识别系统设计  

Design of heuristic identification system for file transfer based on network data stream

作　　者：唐彰国[1] 钟明全[1] 李焕洲[1] 张健[1] 

机构地区：[1]四川师范大学网络与通信技术研究所,四川成都610066

出　　处：《计算机工程与设计》2011年第9期2929-2933,2949,共6页Computer Engineering and Design

基　　金：四川省应用基础研究基金项目(07JY029-011);四川省教育厅基金项目(08ZA043)

摘　　要：为了防止文件通过网络泄露,研究了网络传输文件的格式、传送形式以及通信行为特征,提出一种基于网络数据流的文件传输识别方法。通过引入文件数据流的概念,构建了具有特异性的文件特征指纹库,采用自适应深度协议分析技术,对文件传输在通信协议中表现出的内容和行为特征信息进行多层次启发式的检测。测试结果表明,该系统运行高效,检测结果准确。In order to prevent files leakage through the network,the network transmission document format,the transmission form and communication behavior characteristics is studied.And a kind of file transfer recognition methods based on the network data stream is proposed.By introducing the concept of file data stream,the file fingerprint database with specific characteristics is constructed,and the depth protocol analysis is adopted using adaptive technology.A multi-level heuristic identification system is designed to detect the content and behavior characteristic information displayed in the file transfer communication protocol.Test results indicate that the system runs efficient and the results are accurate.

关 键 词：网络 数据流 启发式 通信特征 文件传输 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]