The Design And Implementation Of Network Security Event Centralized Management System

Effective network management is the guarantee of normal network operation. Nowadays, along with the size of network expanding and the complexity of network framework increasing, the security and management problems that exsited in Network Administration are increasing. Particularly in network security management network attacking are hard to be found out, it also can't respond in time and its management is inefficiency neither.This thesis view of the current network security and management problems, researched and designed a system that based on network security incidents. The system collect massive network data and information, then analysis this information, and find out the attacks and computers which influence the network security or network performance. Then this system can take the evidence from these attacks, dispose those computers and eliminate attacking influence. From the functional sense, the system focuses on security management, and it integrates with performance management, configuration management, fault management and so on. In addition, it also increases user management function.This thesis puts forward the objective and ideas of the system clearly, and then puts forward the whole of framework and system architecture. In the thesis describes architecture used by hiberarchy method, and then discusses the architecture in detail. After system design, we implement four modules based on the existing environment, these four modules are network equipment performance management module, Syslog management module, NetFlow management module and integrated management module. In conjunction with the specific practice of system design and implementation, the thesis sumes up the key technical and difficult issues at the process of system design and implementation, including data processing, databases, network security and management, and many other technologies.The system is operating well in my school campus network now. It solves many problems and improves the efficiency of the network management. Especially, it reduces the network manage.