Design And Realization Of Distributed Security Management Platform

At the beginning of this paper, we summarize the development of network security and network security management, point out the important status of network security management in network security area and discover the relationship among network security management and other network security technologies. We find that there are some problems in network security management, Such as the confusion of management, the complexity of operation, the difficulty for use and the high demanding of the personnel. The cause of these problems is lacking an efficient united management carrier. It results in that the network security devices are managed separated and security information isolated with security devices. Therefore, we propose a distributed Network Security Management Platform which can provide a graphic interface for unify operation of security devices, not only collect and analyze security data but also real-time response. Besides, it could deploy and update devices remotely.In this paper, we propose an integrated mode and the details for the Network Security Management Platform, with which we can solve the problems in network security management. Base on these, we propose a frame fitting for distributed Network Security Management Platform: JMX management frame, apply the frame to the mode of the platform, implementing the framework of the platform.After that, we describe the security policy management and access control module detailedly, show the implementation procedure, module interfaces and date structures.At the end of the paper, we sum up the fruit of this paper and point out the insufficiency of the realization of distributed network security management platform. We also discuss the new demand of network security management platform and the new direction of network security management.