Research On Security Component Management Of Information System Based On CORBA

With the development of information security technology, different kinds of products from different manufacturers co-exist in an information security system. The administrators face two challenges:the increasing and changing of many kinds of information security products from different manufacturers and it must be ensure that the system's risk meets the needs of business.In this paper, a method was presented to manage the information system security components in a unified way and a CORBA-based security components management model was made. The model is composed of management framework and process of security components as well as XML-based security policy description language. The management framework is composed of component detection, component lifecycle management, collision detection and so on. The process presents the concrete management steps. The XML-based security policy description language provides the support for security policy management of components. The adoption of unified management makes all kinds of information security components from different manufacturers as the whole protecting system to meet the requirements of the target information system. At last, the prototype system was established, in which components configuration, updates, collision detection, security policy management were completed; the visual method was in used so that the administrators correspond the resource of the information security system and enhance its protection capability.