The Design And Implementation Of Network Terminal Security Management System(NTSMS)

The Network Terminates Security Management System (NTSMS) in Linyi Power Supply Company is designed and developed to realize automatic termination management and increase the security in the network. It actualizes IP address authenticity, carries out a vivid network access control, and realizes automatic terminal network configuration and OS patch updating.The system described in this article uses LAMP as the design platform, with LINUX operating system, APACHE network server, MySQL database and PHP programming language. According to the requirements of users, the concentrative management machine, firewall, control module for the exchange machine and the client termination management program are designed.The system development background and the present status of the termination management system home and abroad are analyzed in this article, with description of the NTSMS structure and the key problems it resolves as follows.a) The IP address authenticity of network terminates. By now, without mature and valid control in IP address assignment, network termination users can change IP address optionally, which makes it difficult to manage IP address. This problem is resolved by binding the MAC address of network card with IP address.b) Increase in the network automatic management. The network is managed by manual configuration or automatic DHCP assignment. The foregoing takes too much time and efforts, while the latter results in variable IP address. This system combines the terminates database with DHCP, so the network configuration can change automatically along with the database, this makes maintenance and the IP address management easy and convenient.c) Access authority control of the terminates to the Internet. Although the traditional firewall can limit the access right of the single consumer with a complicated strategy, it is hard to configure all users. The NTSMS system can assign different authority according to users according to his authentic and unique IP address, and it provides a friendly graphic interface and the combined firewall.d) Fine management of the terminal assets. The client program can collect the hardware and software information automatically, which provides exact data for company assets management.e) Security guarantee for the terminal computer. The system can provide automatic update of windows patches to remedy the system leak in time, and the firewall and ARP deception-immune program combined can prevent virus and hacker attack.