Research And Implementation Of Security Management Based On CIM

With the development of the network technology, the network security has become a focus of attention. Meanwhile, the single network security product, limited with function and capability, generally focus on a certain aspect of security problems. The network security management system which integrates kinds of network security products can realize a unified and efficient managing and controlling, embody the integrality and dynamics in network security, and improve the security, usability, dependability and validity of network.The thesis studied the management information modeling method based on CIM, the security management system of security equipment designed and realized based on the model. The main contributions of the thesis are as follows.Firstly, a framework of security management based on CIM/WBEM was designed. The thesis studied the theory of CIM and modeling method based on CIM, then researched the management realization framework and designed a framework of security management based on CIM.Secondly, a CIM model of network security equipment was build. The thesis analyzed and induced the basic functions of the network security equipment, and then the extension schema of network security equipment was build atop the core model and common model of CIM. A CIM standard information model of Network Isolation was designed to verify the validity of CIM information modeling.Thirdly, architecture of security management system was proposed. The thesis adopted the method of hierarchy and abstracts to syncretism the diversity of security management system, and divided the security management system into four layers in conception, such as resource, data, application and user.Finally, a prototype of security management system was realized based on CIM. Each function module of management system, multi agent of equipment, the distribute mechanism of data and the mechanism of reliable transmission were realized.The achievement of the thesis has been used in some projects, which show that the modeling method in thesis have good value in currency and the practice of project, and the network security management system support for extension.