Design And Implementation Of Network Security Management System

With the development of the network security management technology, the configurafion and management of the network security equipments become more and more complex. Meanwhile, the security of the network depends not on individual security equipment, but on the whole system. The security management system inspects and controls the operation state of the whole network through managing center to enhance the network's security, usability and reliability.In this disertation, the network security management system is a set of software, which aims at how to effectively manage a number of security components in complex distributed network. Through this software, we can achieve highly integrative, intelligent network security management system which makes kinds of security equipments coexist and cooperate, so as to auto-operate and make an appropriate response on the presetting security policy. This network security system can display the network's security states and provide the security incident tables of the protected network. The main contributions of the disertation are as follows:(1) Establish the whole design ideas of three layers frame of the network security management system, namely equipment layer, application and service layer, control and management layer. The equipment layer refers as the network security devices and equipments controlled by the security management system. The application and service layer accomplish the communication between the controlling and controlled port. In the control and management layer, all functions are integrated into system in COM components.(2)Acording to the function of security management system, we part it into three subsystems, and accomplish the model design corresponding to various subsystems, which mainly include the detector subsystem, manager subsystem and controller subsystem. The key technology of the whole network security management system is investigated in detail.(3) After analyzing the several typical security equipments, we accomplish the design of the connect ports of the network security management system, and focus key point on the design of the expanding port, to insure the system have enough flexibility and extensibility.(4) Design and realize the hardware and software of the whole system.At the same time, we complile a practicable softwzre, install and debug it.