一种基于行为模式的防代理控制机制

校园网络中用户私自设置代理服务系统,给整个网络的有效管理和运行带来了较大难度.传统的凭单一技术来实现防代理的方式,不能充分满足校园网络的实际需要.本文提出了一种通过多种特征综合判断代理行为,并由分布式的软、硬件系统进行统一协调动作,从而从整体上实现防代理的思想和方法.基于分析代理系统各种主要行为属性和动作特征,提出了通过客户端实现对内容、进程和网络属性等代理特征的学习策略,以及通过日志系统实现对流量和应用特征的学习策略;讨论了系统的整体工作模式和行为策略的设定方法.

A new mechanism of anti-proxy control based on action feacture

With the constant use of proxy system without permission , it has become more difficult for network management. The real requirement in the campus network could not be satisfied by the traditional anti-proxy control. In this paper, a new mechanism of anti-proxy control in which various aspects of action feature are integrated to judge the action of proxy is introduced. This mechanism is coordinated by the distributed software and hardware uniformly. Through analyzing the main attributes and action features of proxy system, this paper presents a study strategy on the proxy features such as content, process and network based on client. The study strategy about data flow and application feature based on log system is also introduced. The whole system model and action strategy have been proposed and demonstrated finally.