Design And Realization Of Integrated Network Security Management Platform

In the beginning this thesis, we summarize the development of Network Security and Network Security Management, point out the important status of Network Security Management in Network Security area and cover the relationship of Network Security Management and other Network Security technology. We find there are some problems in Network Security Management at present. Such as the confusion management, the complexity of operation, the difficulty to use and the high demanding of the personnel. We analyze the cause of the problem is lacking an efficient united management carrier. It result in that Network Security Device is managed separated, Security Information isolated with Security Device in Network Security Management. Therefore, we propose Integrated Network Security Management Platform whose management area can contain the whole network and which is easy operated and has mightiness function.In this paper, we present an integrated mode of Integrated Network Security Management Platform, with which function, we can solve some problems in Network Security Management. We design the structure of platform and the method of realization, and we demonstrate the feasibility of Integrated Network Security Management Platform.Integrated Network Security Management Platform has two key technologies: Network Topology Discovery and Access Control. Network Topology Discovery technology is the base of Network Management. During the search of Topology Management, we analyze two Topology Discovery arithmetics: the one based SNMP protocol and the one based general protocol. Access Control Technology is an important means to maintain Network System Security and protect Network resources. We particularize the role-based Access Control Technology.After analyze the demand, we propose a realization frame fitting for Integrated Network Security Management Platform: JMX management frame. And we apply the frame into the mode of the platform, realizing the whole structure of the platform.In the system of Management Platform, we implement the two Topology Discovery arithmetics mentioned above and explain the implement process in details. We also realize the role-based Access Control system and present the actual interfaces.In the end, we sum up the fruit of this paper and point out the insufficiency of the realization of Integrated Network Security Management platform. And we discuss the further work and the new demand of Network Security Management platform and the new development direction of Network Security Management.