Research And Design Of Distributed Network Security Management System Based On Ice Middleware

As the expansion of network scale and the service provided by it becomes more complex, the network security management system of centralized structure, which requires more performance hardware, larger network bandwidth load and is not enough flexibility, has been unable to meet the needs of the present management. And, the distributed network security management system has been more effective at the requirements of resources and bandwidth and also be carried out in accordance with the network scale, making it being a development direction of the present and future network security management.In accordance with the status quo, based on the requirement of the NetHawk network security management system design, this paper makes the discussion and research of the distributed security management system design, which bases on the distribute programming language of Ice( Internet Communications Engine ), and the solutions of some key modules, including heterogeneous basic module and proxy of the Linux network firewall.The first, paper introduces the development and status quo of the network security management. It demonstrates the trends of network management architecture from the centralized to the distributed, and the network security management of the unique characteristics and the status quo.based on the requirement of NetHawk network security management system design, paper analyzes a number of key issues of the distributed network security system and proposes corresponding solutions. And, by Secondly, integrating the basic functions of NetHawk system with distributed architecture needs, after comparing a variety of distributed communications solutions for the advantages and disadvantages, the paper proposed unified management of a variety of equipment, services and overall positioning of the distributed communication based on the Ice module design. The overall communications program takes into account in the design of the project pre-development of weak implementation of distributed (levels), the latter re-distributed implementation needs. Program is divided into basic functional framework and the extensions framework, and in order to achieve the weak distributed system , there is only implement the extension framework.Next, the paper introduces detailly the design and implement of the heterogeneous basic module and the proxy of network firewall. Then, introduces simply the communication process of the key modules of the expansion.At last ,summing up the design of the distributed Nethawk Security Network System. As the NetHawk network security management system is being developed in the laboratory, the project of levels has been finished . the research team is working hardly for the the distributed system.