Study On Security Of SNMPv3-based Network Management System

Along with the prompt development and widespread of computer network, it's scale becomes more and more large, structure becomes more and more complex and guarantee network function reliability becomes more and more difficult. So, we need a network management system which has perfect function to guarantee network function with stability and reliability. Since the early of 90's, SNMP (Simple Network Management Protocol) has been adopted widely in network management. In a lot of network devices, SNMP has been supported to monitor and configure network status. Transmitting data by SNMP, administrator can use network manager supervise network even though devices been installed in obscurity and far away place. SNMP has been the standard in network management in fact. In the early of 90's, SNMP had developed prompt, but at the same time the shortcoming of SNMP had been exposed such as the lack of communication of manager, transmission of mass data, especially lack of security. In SNMPv2, the first and second shortcoming had been improved, but the security hadn't improved. And some function hasn't been realized such as identity validate, encrypt, authentication, access control, the security in configure and management in far away place.The work group of IETF SNMPv3 put forward internet advices RFC 2271-2275 in 1998. By these internet advices, SNMPv3 had been come into being formally. In these documentations, the system framework which included all of function of SNMPv1/SNMPv2 and the new security mechanism which included validate and encrypt had been defined, and, at the same time, a set of rule of network security and access control had been prescribed. So, SNMPv3 increased security and management mechanism based of SNMPv2. However, the existing devices only support SNMPv2 not SNMPv3. The ability of SNMPv2 management had been decreased sharply since the security of SNMPv2 hadn't been improved.Aims at these problems, this thesis belongs to application research. At first, the framework, principle and security mechanism of SNMPv3 is systemically analyzed. The second, based of the principle of SNMPv3 and the client/server model, this thesis builds four models to research and practice the security of network management system based-SNMpv3. The result indicated that SNMPv3 makes up the security shortcomingof SNMPv1/SNMPv2 which has the most widely application in network management due to the security of SNMPv3 although the increased complex of network management by using SNMPv3.