高速网络内容监控系统的关键技术分析

摘要

Along with the rapid development of network technology, high-speed network gradually spreads, and high-speed network content monitoring is one of the basic measures to protect network security. This paper proposes a solution for high-speed network content monitoring system. The system, based on snort design and reformation, considering the features like high speed network information processing's timeliness, the indivisibility of analysis based on conversation connection and so on, overalls the combination of buffer cohort and multi-threading, the lightweight load balance strategies, the improvement of the rules match pattern and AC-WM multi-pattern match algorithm. The test shows that the measures given above can raise the efficiency of system and improve its performance.%　　随着网络技术的迅速发展，高速网络逐渐普及，高速网络下的内容监控是保护网络安全的基本措施之一。文章提出了一种高速网络内容监控系统的解决方案，该系统基于Snort设计改造，综合考虑高速网络信息处理的实时性、基于会话连接分析的不可分割性等特点，结合缓冲队列与多线程技术，采用轻量级的负载均衡策略，对匹配模式优化改进并应用了AC-WM多模式匹配算法。测试表明，上述措施能够提高系统效率，改善系统性能。