Research And Realization Of Network Security Isolation Equipment's Security Management And Auditing System Based On J2EE

With the rapid development of network information communication, there are more and more attacks threatening the security of network. It is hence vital for the spread of information with connections to the network to ensure that their networks are secure. Many security systems for the network are composed of firewalls, intrusion detection and viruses guard. All of these techniques have the same point: they are measures according to attacks character after they have appeared. The Network Security Isolation Equipment which we are developing is different from above techniques. According to the principle that trying to make connection of network after making sure of its security, the equipment offer a kind of excellent protection to network security through forbidding accessing of users who were not authorization and intrusion detection.Security Management and Auditing System is one of the important components of Network Security Isolation Equipment and in tight relation to other subsystems. It is the main interface for management and control of Network Security Isolation Equipment and mainly implement configuration of security strategy, control of equipment status, auditing, management of users, configuration of IDS and so on.In this paper, the research and realization of Security Management and Auditing System is based on J2EE platform. A standard multi-layer-distributed J2EE architecture is proposed on the basis of deeply research of the J2EE architecture and technologies. The Struts framework which implements MVC pattern is the Web tier. The simple JavaBean is the business tier. The DAO pattern and Hibernate framework is the persistence tier.In this paper, firstly we introduced the Network Security Isolation Equipment briefly and analyzed the Security Management and Auditing System deeply; then we expatiated the design and implement of Security Management and Auditing System particularly and studied some essential technology including design Web page layout by using Struts Tiles framework, implement data access by Hibernate and DAO, security validate and operation of report forms; finally, we summarized advantages and disadvantages of this system which implement by J2EE technology.Ground on above key technologies, the Security Management and Auditing System has many properties such as simple and reasonable framework, legible structure and high efficiency. It is very congruous to be used by such units as government, military and enterprises, because of the characteristics of good portability, extendibility, maintainability, easy-to-use and security.