Research of Protocol Behavior Audit Technology Based on Regular Expressions
Yongjun Wang · Modern Electronics Technique · 2010
The users′ behavior is analyzed and the audit is performed with the protocol behavior audit technology through the on-line analysis of the application layer protocol.The evidence is provided for monitoring network security by the protocol behavior audit,which realizes the purpose of enhancing the network security.The technology of the protocol behavior analysis is discussed emphatically with the regular expressions.A technology framework of the flexible and scalable protocol behavior audit is proposed.Based on the technology framework,a protocol behavior audit system was implemented for auditing the HTTP protocol,SMB protocol and TNS protocol.The process of using the technology of protocol behavior analysis based on regular expressions in this system is elaborated through the introduction of the detailed example.The testing results of the system verify the effectiveness of the protocol behavior audit technology based on regular expressions.