A method for auditing and processing network transmission files
A network transmission and file technology, applied in the field of network security, can solve problems such as low accuracy, low efficiency, and parsing errors, and achieve the effect of improving accuracy and efficiency
Active Publication Date: 2016-11-16
BEIJINGNETENTSEC
View PDF8 Cites 0 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
[0003] This technology can achieve more accurate analysis of plaintext data packets, but the analysis of encrypted data may lead to analysis errors or the original file cannot be opened correctly after combination.
In addition to the low accuracy rate, the parsing efficiency is not very ideal. For plaintext data packets, only distinguishing ordinary data packets from file data packets will lead to an overly cumbersome algorithm. Due to the delay of network data packets, the efficiency is low. Low
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment Construction
[0013] The technical solutions of the present invention will be described in further detail below with reference to the accompanying drawings and embodiments.
[0014] figure 1 It is a flow chart of an audit processing method for network transmission files according to an embodiment of the present invention. The present invention bypasses the analysis operation of data packets in the network, avoids low-efficiency methods such as decryption, accurately identifies network file transmission actions in all processes through file filtering driver and hook technology, and provides an efficient and accurate network Audit processing method for transferred files.
[0015] Step 101, build and install the file filter driver, the file filter driver is installed in the driver layer.
[0016] Concretely, build the file filter driver, and install the file filter driver in the driver layer, so that the file filter driver runs in the kernel mode of the operating system, has the highest syst...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The invention relates to an audit processing method for a network transfer file. The audit processing method for the network transfer file comprises creating and installing a file filter driver, wherein the file filter driver is installed in a driver layer; monitoring file operation in the process through the driver layer and obtaining a file subjected to operation processing through the file filter driver; extracting file feature data of the file from the file; enabling the file feature data to be generated into a file list and sending the file list to an application layer; matching obtained keywords of a network transfer file of a user with the file list through the application layer and backing up the matched file to a server. The audit processing method for the network transfer file bypasses parse operation on network data packets, avoids low-efficiency methods such as decryption, and accurately recognizes network file transfer actions in all processes through a hook technology of the file filter driver and the application layer, thereby improving accuracy and efficiency of audit on the network transfer file.
Description
technical field [0001] The invention relates to the field of network security, in particular to an audit processing method for network transmission files. Background technique [0002] With the rapid development of Internet bandwidth and applications, the amount of data processed by the network audit system is increasing. How to accurately audit the files transmitted in the network environment has become a technical problem that needs to be solved urgently. In the prior art, the user data packets are captured and analyzed through the online behavior management and other product equipment deployed in the network environment, and the data packets of the files are distinguished according to the results, and all related data packets are combined into the original file. [0003] This technology can achieve more accurate analysis of plaintext data packets, but the analysis of encrypted data may lead to analysis errors or the original file cannot be opened correctly after combinati...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Patents(China)
IPC IPC(8): H04L29/06H04L12/24
Inventor 杨明磊张祺
Owner BEIJINGNETENTSEC