一种非法主机接入内部网络监视系统的设计与实现

摘要

针对内部网络使用者可能产生的安全问题,设计了一套基于C/S模式的非法主机接入的监视系统.在该系统中,设计LANM通信协议,通过竞选算法自动产生子网主监视代理,主监视代理扫描子网、监听免费ARP包、探测合法主机,从而完成子网非法主机的监视.实验结果表明,该系统能有效、快速地监视到接入内部网络的非法主机.%A monitoring system of illegal hosts based on C/S model was designed in order to solve the security problems caused by the users of inner network. In the system, a LANM communication agreement was designed, a master monitor agent was automatically generated by the election algorithm in subnet. Through scanning subnet, monitoring gratuitous ARP packet and probing legal host, the agent can find illegal hosts effectively. The experimental results show that the monitoring system can effectively and quickly monitor illegal hosts in local inner network.