Designing And Building Safe Networking Platform For Community-Electronic Services

This dissertation discusses how to provide a foundation supporting environment for the electronic services of modern communities, which is a sub research topic of a national science and technology support plan. The main research and implementation of e-services is for hardware-based network security management. Under the guidance of network security, network management and other security theory, through research and application monitoting and management, vulnerability assessment techniques, the dissertation proposes a hybrid structured safety management system for community-based VPN networks. The system offers several functions including community vulnerability scanning, network element monitoring, early warning networks, border control, log analysis and other management functions, in order to protect the security of electronic services, and stable operation. To summary, this dissertation has the following contributions.1. This dissertation provides a hybrid network security management model. Multiple authentication mechanisms are provided to improve the user accessing security. And in the management area will be embedded condition monitoring and vulnerability assessment management with integrated, cross-regional communities achieve full coverage of network security management and border control.2. This dissertation provides a scanning strategy to discover vulnerabilities of a system. The strategy is used to carry on vulnerability scanning for different operation systems in a VPN network. It utilizes the self-maintenance OVAL-description-crack scheme to define the storehouse. Along with the strategy, the system also generates visual assessment reports for different platforms.3. Synthesis the result of crack appraisal and custom threshold form the joint security mechanisms. The access control strategy under VPN network environment is generated automatically. The network boundary control is realized from VPN user authentication strategy.The platform is completed, first of all, through the novelty search organization it illustrate the design of advanced technology and applied for a patent. The platform has been through the evaluation of professional bodies and the actual commercial networks on community electron service is deployed. As a result, this platform achieves the research goal and has high practical value. As discovered in plasticise, all network elements of the community services VPN network can be monitored. The bug assessment of each system is accurate and highly efficient at the cost of small overhead. The security management of entire network is realized from the complete linkage of security mechanisms.