Gao Peng,Zhang Deyun, Sun Chaohui, Zhai Yahui
(School of Electronics and Information Engineering, Xi'an Jiaotong University, Xi'an 710049, China)
Abstract:A novel and high efficient content based E mail auditing system and its implement are described. The system consists of packet filter module and email reconstruct module. Keywords are encoded into Base64, UUcode and Quoted Printable format, after they are bit shifted. The packet filter module takes full advantage of the fast multi pattern matching technology searching for encoded keywords in packets. Only when one of keywords is found in packet, all packets belong to the same TCP link will be sent to E mail reconstruction module. The performance of E mail auditing system is better than of systems with existing structure.
Keywords:E-mail;multiple pattern match;encode;auditing system