未成年人上网内容过滤系统的设计与实现
|
摘要
随着互联网技术的发展,Internet已成为当今世界最大的资源库。然而Internet上的信息良莠不齐,信息的随意浏览与发布,使得它在给人们带来便利的同时也产生了负面影响。如何有效防范互联网上不良信息对未成年人的危害,保护未成年人的健康上网是当今社会义不容辞的责任。
论文在分析未成年人沉迷于网络的若干因素的基础上,认为造成这一现状的原因是互联网访问过程中缺乏有效、可控的管理机制。因此论文通过对家庭接入互联网的安全过滤技术和安全监管等内容进行研究,并利用各种过滤技术与方法对访问的网络内容和网站等进行严格控制,帮助家长对未成年人上网活动进行管理。从技术和监管的角度探索了对未成年人进行网络保护的方法。本论文的主要工作如下:
1、分析了当前几款针对未成年上网内容进行过滤的产品的特点和不足,设计并实现了一款基于主机的未成年人网络内容过滤的开放性系统—网络保姆。该系统可以在家庭计算机上直接安装,具有安装简单、免费使用、易于配置等优点。
2、论文分析比较了Windows环境下几种数据包截获技术的特点,研究了IP与TCP等包头的过滤技术。通过对特定的IP地址、TCP或UDP协议端口等的过滤,可以实现对特定网址和特定服务的限制。通过白名单机制,可以限制未成年人只能对指定的“绿色网站”进行访问,实现有效的安全控制与防护。
3、考虑到网站的动态性和内容的不确定性,网络保姆系统实现了横跨驱动层、网络层、应用层的过滤模式,配合黑名单机制,对不健康或暴力内容的网页进行过滤,效果更好。
4、通过对系统的功能和性能进行测试,证明该系统能够根据制定的网络访问策略有效地管理未成年人访问网络的行为,能够及时地阻断网络上的不良信息对未成年人造成伤害,实现了论文的初步研究目标。
With the development of Internet technology, Internet has been the biggest resources depository in the world. While on the Internet, the good and the bad information are mixed together. Besides convenience, the arbitrary browse and release of information bring people a great negative effect. Although the current security tools, such as firewall, anti-virus software and intrusion detection system, do better in the prevention of security threats, these tools are mainly aiming at the security protection of enterprise network but not home network. This situation will cause a large number of young persons to be addicted to games, browse pornographic or violent website, and finally be guided to commit crime. So how to effectively protect young persons from harmful information and form a healthy climate of Internet use become a bounden responsibility in the current society.
After analyzing the various reasons why many young persons are addicted to games, we find that the most important reason is the lack of effective and controllable management mechanism on the Internet. So the security filtering and supervision in home access to Internet are selected for researching in this dissertation. Meanwhile, several filtering technologies and methods are adopted to control the information which is released on the Internet. All the things we do will help the parents manage their children's behavior of Internet use and protect the children from different angles such as technology and supervision. The main works are as follows:
1. There are many deficiencies in the current content filtering products. For example, their filtering technologies are either too simple to use or relatively advance but the price of the product is very expensive. So the spread and popularization of Internet are affected in family area. In this dissertation, an open source system named Network Nanny, which is used for filtering network content ,is implemented. It can be installed directly on home computer, and have a lot of advantages, such as easy-installing, easy-configuring and charge free.
2. The supervision to the young persons' behavior of Internet use. Several technologies of data packet interception on windows operating system are analyzed, while the filtering technologies of TCP/IP header are studied. By filtering some specific IP address ,TCP and UDP ports, the limitations to the specific URLs and service are realized. With the help of white list mechanism, young persons could only access specific green websites, and the security control and protection are realized effectively.
3. The supervision to network content visited by young persons. Considering the dynamicity of websites and the uncertainty of network content, the Network Nanny realizes data packet interception on driver layer by adopting Winsock SPI on application layer. After that data packets are sent to application layer. So the system could realize multilayer filtering model from network to application layers and the filtering effect is very well. Cooperate with black list mechanism, unhealthy and violent websites can be filtered.
4. After designing, debugging and programming, a system named Network Nanny is implemented on windows operating system. The performance testing results show that the system could effectively manage young persons' behavior of Internet use according to the formulated network accessing strategy and timely blockade the hurt to young persons produced by harmful information on the Internet. In a word, the initial researching objective is realized.
论文在分析未成年人沉迷于网络的若干因素的基础上,认为造成这一现状的原因是互联网访问过程中缺乏有效、可控的管理机制。因此论文通过对家庭接入互联网的安全过滤技术和安全监管等内容进行研究,并利用各种过滤技术与方法对访问的网络内容和网站等进行严格控制,帮助家长对未成年人上网活动进行管理。从技术和监管的角度探索了对未成年人进行网络保护的方法。本论文的主要工作如下:
1、分析了当前几款针对未成年上网内容进行过滤的产品的特点和不足,设计并实现了一款基于主机的未成年人网络内容过滤的开放性系统—网络保姆。该系统可以在家庭计算机上直接安装,具有安装简单、免费使用、易于配置等优点。
2、论文分析比较了Windows环境下几种数据包截获技术的特点,研究了IP与TCP等包头的过滤技术。通过对特定的IP地址、TCP或UDP协议端口等的过滤,可以实现对特定网址和特定服务的限制。通过白名单机制,可以限制未成年人只能对指定的“绿色网站”进行访问,实现有效的安全控制与防护。
3、考虑到网站的动态性和内容的不确定性,网络保姆系统实现了横跨驱动层、网络层、应用层的过滤模式,配合黑名单机制,对不健康或暴力内容的网页进行过滤,效果更好。
4、通过对系统的功能和性能进行测试,证明该系统能够根据制定的网络访问策略有效地管理未成年人访问网络的行为,能够及时地阻断网络上的不良信息对未成年人造成伤害,实现了论文的初步研究目标。
With the development of Internet technology, Internet has been the biggest resources depository in the world. While on the Internet, the good and the bad information are mixed together. Besides convenience, the arbitrary browse and release of information bring people a great negative effect. Although the current security tools, such as firewall, anti-virus software and intrusion detection system, do better in the prevention of security threats, these tools are mainly aiming at the security protection of enterprise network but not home network. This situation will cause a large number of young persons to be addicted to games, browse pornographic or violent website, and finally be guided to commit crime. So how to effectively protect young persons from harmful information and form a healthy climate of Internet use become a bounden responsibility in the current society.
After analyzing the various reasons why many young persons are addicted to games, we find that the most important reason is the lack of effective and controllable management mechanism on the Internet. So the security filtering and supervision in home access to Internet are selected for researching in this dissertation. Meanwhile, several filtering technologies and methods are adopted to control the information which is released on the Internet. All the things we do will help the parents manage their children's behavior of Internet use and protect the children from different angles such as technology and supervision. The main works are as follows:
1. There are many deficiencies in the current content filtering products. For example, their filtering technologies are either too simple to use or relatively advance but the price of the product is very expensive. So the spread and popularization of Internet are affected in family area. In this dissertation, an open source system named Network Nanny, which is used for filtering network content ,is implemented. It can be installed directly on home computer, and have a lot of advantages, such as easy-installing, easy-configuring and charge free.
2. The supervision to the young persons' behavior of Internet use. Several technologies of data packet interception on windows operating system are analyzed, while the filtering technologies of TCP/IP header are studied. By filtering some specific IP address ,TCP and UDP ports, the limitations to the specific URLs and service are realized. With the help of white list mechanism, young persons could only access specific green websites, and the security control and protection are realized effectively.
3. The supervision to network content visited by young persons. Considering the dynamicity of websites and the uncertainty of network content, the Network Nanny realizes data packet interception on driver layer by adopting Winsock SPI on application layer. After that data packets are sent to application layer. So the system could realize multilayer filtering model from network to application layers and the filtering effect is very well. Cooperate with black list mechanism, unhealthy and violent websites can be filtered.
4. After designing, debugging and programming, a system named Network Nanny is implemented on windows operating system. The performance testing results show that the system could effectively manage young persons' behavior of Internet use according to the formulated network accessing strategy and timely blockade the hurt to young persons produced by harmful information on the Internet. In a word, the initial researching objective is realized.
引文
[1]网络与信息安全.http://www.ptsn.net.cn/article_new/show_article.php [EB/OL].通标网.2008-05-07
[2]张宇润.保护青少年免受网络淫秽色情信息影响的法律对策[J].青少年犯罪问题,2006(02):31-49
[3]何静,刘海燕,宫云战,在于IS的W1VW代理服务中实现基网络安全的内容过滤,计算机工程与应用[J].2003年20期
[4]网民对中国互联网的内容和安全问题严重不信赖[EB/OL].北方网http://www.enorth.com.cn 2008-07-25 07:47
[5]陈阳贵,Web内容过滤算法设计与实现[D]硕士,南京大学硕士学位论文,2001.6
[6]郭燕慧,王小捷,钟义信,文本倾向识别的置信度估计,计算机工程与应用[J].2002.01
[7]德刚远离网络色情侵害[J].中国社会导刊,2006(15):卷首语
[8]石静 网络内容过滤系统的设计与实现[D]硕士,复旦大学,2005
[9]李强 互联网有害信息实时过滤报警系统的实现[J].计算机工程与设计2006(27)18:19-23
[10]吴庆涛,邵志清 基于内容的网络异常信息过滤[J].计算机应用研究2006(7)116-118
[11]黄首著,夏应炬,吴立德。基于向量空间模型的文本过滤系统[J].软件学报。2003,14(3):435-442。
[12]林鸿飞,战学刚,姚天顺。基于概念扩充的中文文本过滤模型[J].计算机科学。2000,27(2):88-90
[13]李业丽,林鸿飞,姚天顺。基于示例的用户信息需求模型的获取和表示。计算机工程和应用[J]。2000,9:11-16
[14]RobertWeless,LCSW,CAS,HowdolkngwiflamasexualAddiet?
[15]Patriciaallance,ThePsyoftheIntemet,CambridgeUniversiytPress1999.
[16]P.Gupta and N.McKeown.Algorithms for Packet Classification.IEEE Network,vol.15,no.2,Mar.Apr.2001,24-32
[17]Gonzolo Navarro,Mathieu Raffinot.Fast and simple character classes and bounded gaps.
[18]pattern matching with application to protein searching.Proceedings of the fifth annual.
[19]international conference on Computational biology.P231-240
[20]Stevens,W.R.著,范建华译.TCP/IP详解卷Ⅰ协议[M].北京机械工业出版社.2002
[21]朱雁辉.Windows防火墙与网络封包截获技术[M]..电子工业出版社.2002
[22]Microsoft WindowsXP DDK.Microsoft Corporation.http://www.microsoft.com
[23]郭兴阳,高峰,唐朝京.一种NDIS中间层数据包过滤方法[J].计算机工程2004(9)
[24]Ari Luotonen,Web Proxy Servers.Prentice Hall PTR,1997.
[25]Platform for Internet Content Selection(PICS) URL:http://www.w3.org/PICS/
[26]RFC 1945:Hypertext Transfer Protocol—HTTP/1.0
[27]RFC 2068:Hypertext Transfer Protocol—HTTP/1.1.
[28]RFC 2616:Hypertext Transfer Protocol—HTTP/1.1.
[29]黄晓斌,邱明辉.网络信息过滤系统研究情报学报,2004,23(3):326-332
[30]SmartFilter URL:http://www.securecomputing.com/index.cfm? Skey=85
[31]李蕾,乔佩利,陈训逊.一种IP访问控制技术的实现.信息技术,2001,6
[32]王岩梅,顾训薇.单机版防火墙系统中数据包过滤技术的研究[J].计算机工程,2001,11
[33]Berry Ravindran S.A Fast String Matching Algorithm and Experimental Results[A].Proceedings of the Prague Stringology Club Workshop'99[C],1999.16-28
[34]王永成等.中文信息处理技术及其基础[M].上海交通大学出版社,1992:65-72
[35]Knuth DE,Morris Jr JH,Prath VR.Fast pattern matching in strings[J]. SIAMJ.Comput,1977.6(1):323-350
[36]Hume A,Sunday DM.Fast String Searching[J].Softw.Pract.Exp.,1991,21(11):1221-1248
[37]Sunday DM.A Very Fast Substring Search Algorithm[J].Commun.ACM,1990,33(8):132-142
[38]Aho AM Corasick M J.Efficient string matching:an aid to bibliographic search[J].Communication of the ACM,1975,18(6):333-340
[39]H.O.Ibarra,T.Jiang.String Editing on a One-Way Linear Array of Finite-State Machines,IEEE TRANS on Computer,1992,41(1):112
[40]王世昌.字符串匹配的自动机方法.计算机应用[J].1996,16(4):25-29
[41]Surf-Watch URL:http://www.surfwatch.com/
[42]CyberPatrol URL:http://www.cyberpatrol.com/
[43]ebSENSE URL:http://www.websense.com/
[44]Obert Weless,LCSW,CAS,Cybersex Addietion Sereening Test.
[45]学刚.面向奥运的中文网页信息获取方法的初步研究[D]清华大学,2004.
[46]跃进.基于Internet的信息抽取技术研究[D]大连理工大学,2005.
[47]媛芳.面向产品创新设计的知识获取研究[D]西北工业大学,2004.
[48]志远.基于WEB文本挖掘的客户知识采集方法研究[D]国防科学技术大学,2003.
[49]贤博.基于Web挖掘技术的网络营销决策支持系统研究[D]合肥工业大学,2004
[50]罗公明.网页多主题内容块的识别和提取[D].吉林大学,2005.
[51]马莉.基于SVM的垃圾邮件过滤的研究[D].山东大学,2005.
[52]吴志峰.基于概念特征的中文文本分类研究[D].河北大学,2005.
[53]崔彩霞.基于支持向量机的文本分类方法研究[D].山西大学,2005.
[2]张宇润.保护青少年免受网络淫秽色情信息影响的法律对策[J].青少年犯罪问题,2006(02):31-49
[3]何静,刘海燕,宫云战,在于IS的W1VW代理服务中实现基网络安全的内容过滤,计算机工程与应用[J].2003年20期
[4]网民对中国互联网的内容和安全问题严重不信赖[EB/OL].北方网http://www.enorth.com.cn 2008-07-25 07:47
[5]陈阳贵,Web内容过滤算法设计与实现[D]硕士,南京大学硕士学位论文,2001.6
[6]郭燕慧,王小捷,钟义信,文本倾向识别的置信度估计,计算机工程与应用[J].2002.01
[7]德刚远离网络色情侵害[J].中国社会导刊,2006(15):卷首语
[8]石静 网络内容过滤系统的设计与实现[D]硕士,复旦大学,2005
[9]李强 互联网有害信息实时过滤报警系统的实现[J].计算机工程与设计2006(27)18:19-23
[10]吴庆涛,邵志清 基于内容的网络异常信息过滤[J].计算机应用研究2006(7)116-118
[11]黄首著,夏应炬,吴立德。基于向量空间模型的文本过滤系统[J].软件学报。2003,14(3):435-442。
[12]林鸿飞,战学刚,姚天顺。基于概念扩充的中文文本过滤模型[J].计算机科学。2000,27(2):88-90
[13]李业丽,林鸿飞,姚天顺。基于示例的用户信息需求模型的获取和表示。计算机工程和应用[J]。2000,9:11-16
[14]RobertWeless,LCSW,CAS,HowdolkngwiflamasexualAddiet?
[15]Patriciaallance,ThePsyoftheIntemet,CambridgeUniversiytPress1999.
[16]P.Gupta and N.McKeown.Algorithms for Packet Classification.IEEE Network,vol.15,no.2,Mar.Apr.2001,24-32
[17]Gonzolo Navarro,Mathieu Raffinot.Fast and simple character classes and bounded gaps.
[18]pattern matching with application to protein searching.Proceedings of the fifth annual.
[19]international conference on Computational biology.P231-240
[20]Stevens,W.R.著,范建华译.TCP/IP详解卷Ⅰ协议[M].北京机械工业出版社.2002
[21]朱雁辉.Windows防火墙与网络封包截获技术[M]..电子工业出版社.2002
[22]Microsoft WindowsXP DDK.Microsoft Corporation.http://www.microsoft.com
[23]郭兴阳,高峰,唐朝京.一种NDIS中间层数据包过滤方法[J].计算机工程2004(9)
[24]Ari Luotonen,Web Proxy Servers.Prentice Hall PTR,1997.
[25]Platform for Internet Content Selection(PICS) URL:http://www.w3.org/PICS/
[26]RFC 1945:Hypertext Transfer Protocol—HTTP/1.0
[27]RFC 2068:Hypertext Transfer Protocol—HTTP/1.1.
[28]RFC 2616:Hypertext Transfer Protocol—HTTP/1.1.
[29]黄晓斌,邱明辉.网络信息过滤系统研究情报学报,2004,23(3):326-332
[30]SmartFilter URL:http://www.securecomputing.com/index.cfm? Skey=85
[31]李蕾,乔佩利,陈训逊.一种IP访问控制技术的实现.信息技术,2001,6
[32]王岩梅,顾训薇.单机版防火墙系统中数据包过滤技术的研究[J].计算机工程,2001,11
[33]Berry Ravindran S.A Fast String Matching Algorithm and Experimental Results[A].Proceedings of the Prague Stringology Club Workshop'99[C],1999.16-28
[34]王永成等.中文信息处理技术及其基础[M].上海交通大学出版社,1992:65-72
[35]Knuth DE,Morris Jr JH,Prath VR.Fast pattern matching in strings[J]. SIAMJ.Comput,1977.6(1):323-350
[36]Hume A,Sunday DM.Fast String Searching[J].Softw.Pract.Exp.,1991,21(11):1221-1248
[37]Sunday DM.A Very Fast Substring Search Algorithm[J].Commun.ACM,1990,33(8):132-142
[38]Aho AM Corasick M J.Efficient string matching:an aid to bibliographic search[J].Communication of the ACM,1975,18(6):333-340
[39]H.O.Ibarra,T.Jiang.String Editing on a One-Way Linear Array of Finite-State Machines,IEEE TRANS on Computer,1992,41(1):112
[40]王世昌.字符串匹配的自动机方法.计算机应用[J].1996,16(4):25-29
[41]Surf-Watch URL:http://www.surfwatch.com/
[42]CyberPatrol URL:http://www.cyberpatrol.com/
[43]ebSENSE URL:http://www.websense.com/
[44]Obert Weless,LCSW,CAS,Cybersex Addietion Sereening Test.
[45]学刚.面向奥运的中文网页信息获取方法的初步研究[D]清华大学,2004.
[46]跃进.基于Internet的信息抽取技术研究[D]大连理工大学,2005.
[47]媛芳.面向产品创新设计的知识获取研究[D]西北工业大学,2004.
[48]志远.基于WEB文本挖掘的客户知识采集方法研究[D]国防科学技术大学,2003.
[49]贤博.基于Web挖掘技术的网络营销决策支持系统研究[D]合肥工业大学,2004
[50]罗公明.网页多主题内容块的识别和提取[D].吉林大学,2005.
[51]马莉.基于SVM的垃圾邮件过滤的研究[D].山东大学,2005.
[52]吴志峰.基于概念特征的中文文本分类研究[D].河北大学,2005.
[53]崔彩霞.基于支持向量机的文本分类方法研究[D].山西大学,2005.