Ice Based Network Security Management System's Architecture And Communication Design

With the development and application of information technology, network security has drawn increasing attention.Facing an endless stream of network security issues, many agencies and departments have purchased a variety of network security products, such as firewalls, vulnerability scanners, system real-time monitoring, and network anti-virus software. These network security products in a different side to protect the network systems security; network security plays an important role.However, when using network security products,especially when these network security products running on different operating systems or hardware platforms, how effectively they carry out a unified administration and configuration has become a major problem for users. Network Security Management System (NSMS)is to address these issues and propose solutions.Network security management system is a system that effectively manages and monitors the host and network equipments within a local domain.For a network management system, there are two aspects that have a critical influence on the system.The first is the choice of system architecture, for a good architecture can effectively deal with complex and changing needs,also can be flexible and extensible; the second is communication solutions, communication is the soul of a network management system, which directly determines the success of the entire system. Traditional network security systems generally use a single C/S structure, that is, Server provides a variety of services, Client service call to the various requests.But such a structure is clearly difficult to meet the various functions of the load, when facing complex network and different services, so to distinguish the network management capabilities is surely a good choice. This paper presents a middleware-based network (Internet Communication Engine, Ice) three-tier architecture model,achieved a loosely coupled, distributed architecture design, and is more flexible and suitable for expansion and flexibility,and this framework has a common appropriate meaning.On the other hand, the number of host and safety equipments is gradually increasing and the increasing volume of data and communication brings tremendous pressure. Packet loss or latency problem has become the major problem for communication. Based on the popular communication middleware Ice this paper has designed a robust communication module to solve the current network communication problems, after a long period of testing, the communication module is to be with the stability, scalability, and so on.Test data shows that under the frequency for one minute,the communication module can support 2,000 concurrent communications.This paper introduces the Ice in the network security management system architecture design and communication design, analysis of this structure, as well as the benefits of communication modules;last it prospects some Ice applications.