Design And Implementation Of Network Security Management Platform

The thesis analyzes by synthesis the current situation of the network security first, then conception of the network security management platform has been defined on the base of the research about the present condition of the network security technique .The precursor of this platform is the security incident management or the emergency response system, which was designed to safeguard the security of the Beijing Olympic security network. After the Olympic Games, in view of the current situation of our network security, the security incident management and the emergency response system was modified, which can be used more largely.The thesis detailed analyzes the Network security management platform system from the view of function, performance and flexibility, then designs a system of the Functions, Considering the Reliability, usability and ease to maintain, we will design the system as two parts, that is data acquisition subsystem and date application subsystem. The consumer can know the network safety all round through the platform status, then the network can be managed promptly and effectively. The Security incident acquisition subsystem including three Modules, that is Security incident acquisition, Security incident cache and Security incident warehousing, which realized the acquisition warehousing work of the Firewall events,, the IDS events. and the Terminal events; the system adopt the CS frame to design, and the performance is stable; the date application subsystem mainly realizes interaction with the consumers, unified management and comprehensive display the dates that are obtained by the data acquisition subsystem, and the consumers can manage the network safety through the date application subsystem, which is designed by adopting the BS frame, and the operation is convenient, simple, and easy to grasp.The data application subsystem is a typical Web system. When managing in the network safety platform, the date application subsystem is designed by adopting MVC mode, the Struts is used to construct the presentation layer during the develop process, and the system can be divided clearly model, view and controller, which raised the reusability of the code and the expansibility of the system; the core of the profession use data aces object, that is DAO model to abstract and encapsulate all the business Logic, use Hibernate to realize the Persistence Layer.The author intensive studies the hierarchical division of the date application subsystem, and propose a current; model of web system, the System is divided into four layers: the view controlled by Struts, the controller that Java object-oriented, Data persistence layer realized by Hibernate and Data base layer. Practice has proved that adopting this pattern can develop the exploitation efficiency greatly, Shorten the development cycle, promote the Stability, of the system and simplified the difficulty of system design, then reduce the cost of maintenance later.Furthermore, at the same time of reviewing the network safety at the past and the present, the thesis envisages objectively the future development of the network security management platform.