Design And Implementation Of Network Security Monitoring System

As the Internet is becoming more and more popular, it plays a more important role in our lives. People have made many researches and have got much achievement in identification and authority, access control, firewall technologies, computer system security management and network security management. Network monitoring is one of the most urgent problems to be resolved.Firstly, the current development status and the popular technology of network-security are introduced, and their advantages and disadvantages are analyzed in this thesis.Secondly, this thesis puts forward a scheme for network security monitor system. This system introduces multi-ties C/S architecture, by combing the advantages of traditional Network Firewall, Intrusion Detection and Hacking Monitor System. The total system consists of Monitor Console, Data Center Server, Network Sniffer, and Agent which running in controlled machine. Multiple Agents belong to a Data Center Server, and a Monitor Console can accesses and manages multiple Data Center Servers concurrently. The key information, such as status and action on the controlled machine, is reported to Data Center Server by Agent, and the commands of Monitor Console are sent to Agent by Data Center Server. This enables the network system admin to monitor all the information both between the computers in intranet, and between the inner-net and outer-net.Additionally, the communication portion of this system is analyzed, and is improved by using the object-orient middleware technology. It makes the system more reliable.Finally, the testing result and analysis of this system is presentedby this thesis. It shows the goal of this system is achieved.