The Design And Implementation Of IP Network Monitor With High Security

The prosperity of Internet has impelled the explosive increase of data communication all over the world. As data service becomes the main part of network, IP based communication framework becomes the leading technology of information communication.At present, more and more key applications and services of telecom carriers, ISPs and enterprises are built on data network. How to assure the network works high efficiently is critical to these network users. However, with the growth of network size, complexity of network increases, network management has become essential to enable the network work efficiently. Building a distributed management system for data network with high scalability and high performance is one hotspot of communication world. Moreover, build such a system with intelligence property right of our own country is valuable both in theory and practice.Based on construction of a real IP network management system, the thesis analyzes the problems of building performance subsystem of IP network management system and finally implements the subsystem. The thesis also analyzes the security issues of the management system itself, and presents a solution for it.Since IP network users are requiring better quality of network services, the industry promotes concept of "Carrier Grade IP Network". As a result, introduction of TMN (Telecommunication Management Network) to IP network management has already become hotspot of current research of IP network. The system of the thesisfollows framework of TMN embodies concepts of layering and modularization, which ensures the system, has enough scalability.To ensure the high performance and scalability of IP network management system, the thesis analyzes and compares the mainstream distributed computing technologies and platforms. J2EE is finally chosen as system framework for its cross platform ability, service reliability and high performance.Performance management is kernel function of the IP network management system. More specific, performance management is to maintain the quality of service and network efficiency. The thesis analyzes and implements the performance management sub-system from data collection, data processing, data presentation three aspects, and gives algorithm and algorithm implementation for concrete problems in data processing modules, such as distributed Timer, Intelligent Polling, Network fault detection based on ICMP stream analysis, network performance tendency analysis. As for data presentation modules, MVC design pattern is used to decouple the data and data's presentation, improve the scalability of the system.As the main supporting platform for network service of next generation, IP technique itself has some problems to be solved. One outstanding is security of IP protocol, such as privacy, authorization, and access control of network data. Because of the security problem of IP network and in-bind mode of IP network management, network management system has security problem too. Based on detailed analysis of security framework of J2EE and JBOSS, the thesis gives description of security problem from data and data operation aspects, and provides a data transmission solution based on RMI plus SSL, a data access control solution based on WWWWWH(WHO,WHERE,WHEN,WHAT,WHICH,HOW) security policy. The real system provides the security solution through proxy, which not only assures the high security of the system, but also improves the flexibility of the system.