Research On Design And Realization Of Security Sensor Based On SNMP

As network intrusions and attacks increasing, related issues of network information security is gradually attracting people's attention. Nowadays, traditional network security products can not reflect network security status exactly any longer, so the research on network security situational awareness (NSSA) emerges, and it gradually becomes a hot topic in network security field. The NSSA system aims to monitor network security status from several perspectives, detect the potential or arisen anomalies in time, and reasonably forecast the network security status in a time. Facing a great deal of required information, constructing kinds of security sensors are the foundations of NSSA.. Considering SNMP is widely used, simple to realize and with high currency, the SNMP is used as an important network security situation data acquisition method, which acts as the data source in realizing security situation awareness in large scale network.First, NSSA and application of SNMP in network security are investigated, including the proposal and research status of NSSA, development and application of SNMP in network security, then the analysis of situation data and related technologies are introduced. Based on this, functional description of security situational sensor based on SNMP is introduced, architecture of the sensor is designed, and some critical modules are designed and realized, so the target of collecting situation information in kinds of network devices is achieved, and then experiment is done to testify the validity of the architecture and critical modules. Finally, accomplished work is summarized, and the next research points are brought forward.