【作者】 李娟；

【导师】 王林；

【作者基本信息】 西安理工大学 ， 电路与系统， 2009， 硕士

【摘要】 互联网技术的进步大大促进了即时通信的发展,而即时通信软件的出现也悄然地改变了人们的生活方式。随着网络的普及,上网人数不断增长,即时通信使整个互联网变成了一个虚拟的社会。在即时通信使人们的相互联络变得日益方便的同时,由于即时通信系统自身特点所带来的诸如病毒攻击、各种不良言论和反动内容的传播、企业内部技术泄密等一系列安全隐患也引起了技术人员的注意。因此一些即时通信监控软件相继推出,对即时通信用户行为和网络特征的研究具有重要意义。本文在对当今国际社会比较流行的由微软公司推出的即时通信软件MSN的通信协议及消息传输模式进行研究分析的基础上,重点研究了利用原始套接字绑定网卡进行网络抓包的技术,运用字符编码转换等有关知识,自行设计了一个针对MSN消息传输的监控软件。本文首先介绍了即时通信的发展过程以及现状,并就其存在的安全问题进行了详细阐述。在此基础上深入剖析了国际范围应用广泛的即时通信软件MSN的通信协议,总结出了即时通信协议的数据包结构及其基本模型。其次,就监控软件涉及到的相关知识加以介绍,其中包括网络编程、MFC、套接字、多线程和字符编码等有关内容。最后,建立了简单的硬件运行环境,以原始套接字绑定网卡的抓包技术为基础,根据MSN数据包的特点,利用Visual C++的MFC窗口界面设计了针对MSN的即时通信消息传输的监控软件。通过测试,实现了局域网内部对MSN消息传输的指定关键字的监控,并实现了记事本记录功能。更多还原

【Abstract】 The advancement of internet accelerates the development of Instant Messaging enormously. The appearance of Instant Messaging (IM) has been quietly changing the people’s life style. Along with the network popularization, the number of internet users has grown and grown. Instant Messaging has gradually connected the users into a virtual society. Instant Messaging makes the communication one another convenient increasingly. Nevertheless the security hidden trouble brought by IM system itself such as virus attack, broadcast of ill or reactive saying and betray technical secret of corporation had arose technicians’attention and some IM monitor software were already issued one after the other all over the world. As a result the analysis of user behavior and net characteristics of Instant Messaging is significant.In this paper, on the basis of the research and analysis for communication protocol and message transfer model of MSN which is the more popular Instant Messaging software at the international level launched by Microsoft, focus studying the network capture technology by Raw Socket bind the network card, using the knowledge of character encoding, And the monitoring software for MSN message transfer is designed.Firstly, the development and status of Instant Messaging are introduced and some security problems of Instant Messaging are elaborated. On the base of it, communication protocol and login model of MSN are researched and analyzed. Instant Messaging communication protocol packet structure and its basic model are summarized. Secondly, some correlative knowledge to the monitoring software is presented, including network programming, MFC, socket, multi-thread and character encoding. Finally, a simple hardware running environment is build. The monitoring software for MSN message transfer using MFC of C++ computer language is designed. Passing test, the software has achieved the prospective function.更多还原