Research And Practice Of Unified Network Security Management System For Data Collection And Analysis

Unified Network Security Management System is a comprehensive security management software. From the whole network, network security management links every originally isolated island of information security into an organic collaborative system through centralized managing and monitoring various security devices and network security software in the whole network, and realizes monitoring in time, adjusts of dynamic policy, so as to effectively enhance the user's network manageability and safety.After analysis of the current home and overseas status of network security management system, an unification collection device information is proposed by adopting the SNMP protocol in this paper, in order to achieve the unified data format to facilitate management and analysis purposes.The author's main research work and innovation are summarized as the followings:1) Analysis development of current domestic and international network security management and security threats of current network facing.2) The key technology of SNMP, including ASN.1, BER, SMI, MIB, VACM, etc. are described, analysis the weak security of the digital digest algorithm used in the SNMPv3 authentication system, proposed suggestions for improvement of using the SHA-2 instead of SHA-1 and MD5 digital digest algorithm to meet higher security needs.3) deploy equipment and software of the unified network management system used, design specification network connected devices that support SNMP, to support read and write of the SNMP protocol, and the deployment of open source software Snort and Ntop.4) based on the deployment of SNMP protocol equipment and software, design and implementation of a prototype of a unified network management system, which follows the FCAPS model of the five network management functions on the type of rule, the system gives a detailed diagram and the actual management model.The result of this study to build a unified network security management system has a very good reference value.