基于流量特征的可信网络系统设计与实现

摘要

大多数可信网络系统使用的完整性度量技术仅能度量可执行文件而忽略了脚本文件,造成安全隐患.针对该问题,设计实现一种基于流量特征的可信网络系统,不仅对终端进行完整性度量,还利用终端网络流量的周期统计信息判断终端的完整性状态,由此保证脚本文件的可信性.在Linux上实现该系统,结果证明其能够快速检测出特定的脚本病毒.%Most integrity measurement technologies of trusted network systems make use of focuses on executable files. In order to solve the problem that integrity measurement can not guarantee the credibility of the script files, this paper designs a misted network system based on network traffic characteristics. Besides executing the integrity measurement, the system also computes the network traffic statistic information to judge the integrity state of the endpoint, which can be used to detect security threats when executing scripts. The system is implemented on Linux, and application results show that the system can detect some script viruses quickly.