| Nowadays, with the development of computer and communications technology computer networks are popularizing in high speed in peoples lives. More and more corporations, organizations and institutions begin to construct their networks to share the information and resource. At the same time a lot of problems especially networks security problem appears: the access of illegality, hostile intrusion and computer virus. All of them are threatening our networks seriously.To ravel out networks security problems, firewall, IDS(Intrusion Detection Systems) and other security equipments are deployed to networks. Even now there are still many networks intrusion events. Networks need security technology, but what's the most important is security management. If there's lack of comprehensive security management, the security equipments in networks would be an"isolated information island"and of course it's impossible to act on networks security efficiently.Based on a brief description of the networks security management technology, this paper put forward a networks security management solution-networks security management platform after consulting advanced thoughts and trusses both here and abroad. The platform adopts C/S distributed architecture and it could accomplish the function of unified security equipment configure and centralized security audit.Integrating the Syslog and NetFlow technology to implement unified networks security real time monitoring and analysis. Collecting the Syslog and NetFlow message from security equipment real-timely then format it and associate it with security rules to find the security event in time. At the same time, storing the Syslog and NetFlow data to date base. Beause of adopting the thread pool and database connection pool technology, it make the program much more efficient. The platform provide network administrator a friendly Eclipse RCP GUI, So it make network administrator to manage and control the network security conveniently. |
PDF Full Text Request