Research And Implementation Of Security Network Management System With Intrusion Detection

With the rapid development of network technology and continual increase of network application, there are a large amount of demand in the fields of network management and security. At present, lots of network management systems are based on SNMP. There are many other security techniques, but traditional static security defending system, such as firewall, identification etc., can't completely solve all problems existing presently. So dynamic defending technologies are attached importance by more and more researchers.To integrate Network Management, Intrusion Detection and firewall and make them cooperation is the basis of implementing a complete security defending system. At present, it is a research hotspot. This thesis focuses on researching how to make Network Management and Intrusion Detection cooperate according to their characteristic, in order to put forward a system framework and to realize it.First, it briefly introduces basic concept of network management and Intrusion Detection theories, analyzes the mechanism of realizing them and deficiencies of using them, expatiates the necessity of integrating them. Then the author considers how to integrate them from essentially (data source), and put forward an expandable realization policy. Finally, the functional model and system structure are designed based upon demand.The paper introduces in detail the implementation of the system that integrates network management with intrusion detection, and the author illustrates the key technology and some ways to solve the problems of important system models, which is composed of data collection, detection engine, real-time flux statistic, network management models etc. Then the paper presents some testing results of NM-NIDS and analyzes them. In the end, combined with the Integration Network Management development tendency, advances the system transference aim.