【作者】 赵辉；

【导师】 郭勇； 何强；

【作者基本信息】 哈尔滨工业大学 ， 软件工程（专业学位）， 2018， 硕士

【摘要】 远程计算机监测系统是在远端计算机知道并允许的情况下对其进行远程监测。它被广泛的应用于办公、教育等领域,具有很好的现实意义;同时它需要综合运用信息传输技术、网络学、图形学等各种技术手段,具有很好的理论意义。本文在论述并分析了远程计算机监测系统的产生背景和在企业应用中所带来的优点,在对远程计算机监测系统的相关技术进行研究的基础上,基于C/S模型,采用TCP/IP通信协议,利用Socket套接字网络编程,设计并实现了远程计算机监测系统。系统分为被控端和主控端两个部分。被控端主要负责监测信息的捕获,按照预设的规则进行过滤,然后将违规信息上传给主控端;主控端主要负责违规信息的归集与展示,过滤规则的管理与下发。监测的范围有:屏幕监视、音频监听、网址访问、文件访问、程序启动和剪贴板内容。信息传输层设计了两层协议结构,使用DES加密算法保证数据的安全性,使用MD5算法保证数据的完整性。系统采用三层架构模式:用户界面层负责信息的展示与用户交互;业务逻辑层表达领域概念和业务规则;数据访问层提供持久化机制。远程屏幕实时监视模块被控端连续捕获位图,通过对比算法仅对增量变化部分压缩后传输至主控端,降低网络负载的同时提高了传输效率,主控端使用双缓冲技术合成位图刷新来避免高频刷新导致的屏幕闪烁。远程声音监听模块采用DirectSound技术,被控端对声音数据进行连续捕获后发送给主控端进行播放,循环缓冲区的使用降低了系统的开销。同时还实现了基于钩子Hook技术的网址浏览监测、基于Windows日志追踪技术ETW的文件访问监测、基于Windows管理规范WMI技术的程序运行监测和剪贴板内容监测。更多还原

【Abstract】 Remote computer monitoring system is remotely monitored by remote computer when it is known and allowed.It is widely used in office,education and other fields,has a very good practical significance,at the same time it needs the comprehensive use of information transmission technology,network science,graphics and other technical means,has a good theoretical significance.This paper discusses and analyzes the background of remote computer monitoring system and its advantages in enterprise application,on the basis of the research on the related technology of remote computer monitoring system,based on the C/S model,uses the TCP/IP communication protocol,and uses the sock et network programming,the remote monitoring system is designed and implemented.The System is composed of controlled side and controlling side.The controlled side captures monitoring information,filters them according to the preset rules,and then uploads them to controlling side;The controlling side collects and displays invalid records,manages filtering rules.The monitor range is: screen,audio,URL access,file access,process startup and clipboard contents.The two-layer protocol structure is designed in the transmission layer,the DES algorithm guarantees data security,and the MD5 algorithm guarantees data integrity.The system uses three-layer architecture: the user interface layer is responsible for the display of information and user interaction,the business logic layer expresses domain concepts and business rules,and the data access layer provides the persistence mechanism.The remote screen real time monitoring module uses the controlled-end to capture the bitmap continuously,through the contrast algorithm only after the increment change partial compression transmits to the main control side to carry on the double buffering refreshes the way realizes,reduces the network load while enhances the transmission efficiency.The remote voice listening module is controlled by DirectSound technology to transmit the sound data to the main control side,it uses circular buffer to reduce system costs.It also implements web site browsing monitoring based on Hook technology,file access monitoring base d on ETW technology,program running monitoring based on WMI technology,and clipboard content monitoring.更多还原