The Research And Design Of High-speed Network Traffic Content Auditing System

Nowdays we are in a freedom Internet world.Internet rumors,false information,pornography,violence,fraud,reactionary and other illegal information spread.They pose great harm to the socialist modernization construction,the problems to be solved.Network content auditing system as an effective solution to this problem,begins to be applied to various kinds of network audit.However,with the advent of the era of information explosion,traditional network content auditing system cannot satisfy the realistic demand under the background of large data flow.Based on the above background,this thesis adopts the combination of hardware and software to implement high-speed network traffic content auditing system based on the Netronome network stream processing engines and zero-copy data capture technology.It improves the performance of network content auditing system audit.The main contents are:First of all,the basic technologies such as packet capture technology,protocol analysis and content matching technology,session recombination technology are discussed.Second,it also puts forward the protocol analysis technology based on DPI and feature matching and the hierarchical feature matching technique based on content to improve the feature matching accuracy and speed.Then,it introduces the design and implementation of high-speed network traffic content auditing system in detail,mainly including the system requirements analysis,architecture design,database design.According to the working process of the system,this thesis introduces the method of its implementation.Finally,under the laboratory environment,we conducted a performance tests on the auditing system to demonstrate that the system can adapt to the Gigabit network environment.