分布式资源安全监控系统的-计算机应用技术专业论文.docxVIP

分布式资源安全监控系统的研究 ABSTRACT The application of monitoring technology in distributed information resource security is a research focus in recent years. System administrators of common enterprises usually store information in the servers to facilitate the downloading and the utilization by users. However, if the content of information and the behavior of users are not controlled, large information loss may be caused or even confidential information leakage may be occurred. Therefore, improving the control to the use of various information resources is of great significance to the protection of national information assets. This paper firstly makes an analysis to various traditional access control models, and then systematically makes a research on next generation access control model UCON and comprehensively analyzes the access control mechanism of this model and its deficiency. Aiming at the control of downloading behavior of users, a research is made to network data packet capture technology, protocol analysis technology and communication block technology, UCONpreA1OnB2 model is designed, and malicious download preventing sub-system(MDPS) is realized which can conduct real-time monitoring to users downloading behavior. Aiming at the control to the access of server process, a research is made to WDM driver model and file system filter technology, UCONpreA0 model for file server monitoring is designed and file server monitoring sub-system(FSMS) is realized which can actively intercept the file operation by illegal process. Aiming at file anti-secret demand, a research is made to composite document structure, Word document and Excel document structure, a two-layer analysis method based on finite automata is put forward. On this basis, resource security filtering sub-system(RSFS) is designed and realized and content-based file filter is also realized. It is shown be experiments that MDPS sub-system can actively intercept user’s excess downloading behavior and effectively pro