The Research And Implementation Of General Security Management System In Mobile Data Communication Networks

Intrusion Detection System, Fire wall and other Security Devices provide us the safeguard of the network. With the extensive application of networks, the outburst of viruses, intrusion of hackers and other security events are occurring, and these security devices will send thousands of alerts in a short time, in which network management experts can hardly find useful information. In addition, with the expanding of the scale of the network, a single security device cannot detect all the intrusion activities. Thus we should think about how to let these devices cooperate with each other.To solve problems above, this article brings out the concept of security events management, and details the study and implementation of security event management mechanism. Event management can be viewed as the extension of the concept of network management, for it enriches the content of security management which is one of five main functions of network management. Network management and system management are two independent concepts, while we can bridge the two different systems by security event management, which can enhance the security of network.The article involves three aspects of event management. The first is the modeling of event. The second is the study of viral guard technology. The last is the implementation of general security management system in mobile data communication networks. The former two aspects are the base for the last one.The aim of event modeling is to make events from different sources into a uniform format and make them be processed easily later. The author adopts object oriented modeling method, which makes it extensible. The diversity of different events is considered highly when being modeled, and information loss is also tried to avoid. XML language is used to describe the model, which make the model more common.The computer virus are more and more big to the network security management harm, this article to computer virus' characteristic, the typical symptom and the hazardous nature has carried on the analysis, and analyze the security of mobile communication network, proposed virus' preventing system modification.The implementation of general security management system in mobile data communication networks is the emphasis in the article, include record audit management, security event monitor and account password management. The project utilizes the rule based layered architecture, and the modules are loosely coupled, which makes it flexible during deploying.