基于netgraph的实时网络内容过滤引擎的设计与实现-计算机软件与理论专业论文.docxVIP

Title：The Title：The Design and implementation of Netgraph—based Real-time Network Content Filtering Engine Major：Computer Software and Theory Name：Lin Weidan Supervisor：Wang Ruome Abstract The prevalence and development of Internet gives people lhe convenience of rapidly exchanging large-quantity information and change the original time and space concept on people’s mind．However,at the same time．Intemet becomes a place of hiding something hazardous or III．and brings}ol of problems of content security．To solve these crisis and problems，the network content must be monitored and filtered．At present there are the following problems existing on the field of network content monitoring and filtering： system platforms based on Linux。Windows or Unix OS alI have some technicaI or non-technicaI problems；the common—used packet—capturing mechanisms usually can iust achieve the“sniffer’function，but not“intercept” them and do direct filtering and heading off；there is also some Iocalization for the programs based on kerneI firewalI framework and agent server． Aiming at these problems，this thesis analysis the mechanism and principle of Netgraph kemeI networking subsystem on FreeBSD OS．and then design and implement a brand·new real-time network content filtenng engine based on Netgraph．It can be divided to three Ievels：keme}nodes subsystem，user-level filtering subsystem。and rules bases for each application protoc01．This filtering engine have many advantages such as high-performance，powerfuI function，Iow cost，flexibility,modularization and extensibility．It has ven，usefuI value for the places with high content security commands． The thesis elaborated the generaI system architecture．kemel nodes graph design，kerneI modules design，and the advantages of Netgraph over other technologies．It also discussed the experimentaI environment．kernel data structures。configuration steps．user-leveI process flows and some other implementation details of the system． Key Words：Netgraph，node，FreeBSD，netwo