Design And Implementation Of China Telecom (HK)’s Security Event Monitoring Platform Based On SaaS

With the growing popularity of computer technology and the Internet, the rapiddevelopment of a new generation of information technology and e-commerce,followed by the severe challenges of network security is threatening a variety ofenterprises. In response to tackle the problem of damage and information leakagefrom cyber attacks on enterprise applications, in recent years most companies havebegun to invest substantially on a variety of security systems, including the Firewall,Anti-virus Wall, Intrusion Detection System (IDS), Vulnerability Scanning System(VSS) and Behavior Management System (BMS). Although it played a role on thedefense of security attacks, it didn’t work ideally as expected and there is nofundamental change on the information security status of the enterprise due to themere dependence on the deployment of security equipment and lack of awareness andmanagement of network security situation, which requires considerable input. How toattain the most effective security information management services with limitedinvestment has become the real problem faced by all enterprises.Based on the SaaS model-based security event monitoring platform, through therealization of the multi-tenancy technology, we can provide all corporate users unifiedinformation security management services, which can be rented on customer’sdemand and charged on time, the SaaS model software used by enterprises does notrequire purchase of specialized hardware and software, construction of the engineroom, the recruitment of IT personnel, security information management system canbe used via the Internet.The essay provides a profound research on the SaaS software architecture and theSaaS Model database structure based on the research on the SaaS service model, andalso analyzed the SaaS model software key technologies, including analyzing andcomparing the common four massive data distributed storage system (GFS, MogileFs,FastDFS and HDFS), and the research and discussion on the Map/Reduce distributedcomputing model, as well as the SaaS model multi-tenancy technology.In the essay, China Telecom (HK) security event monitoring platform project isused as a case, through the analysis of the demand for the platform and the designprinciples, the building of the structure of the platform by using the4-layersframework based on the Capability Maturity Model level4is confirmed. And theessay states that on the basis of the research on the key platform technologies the realization of the3key technologies of the platform which are: the realization of themass distributed storage of the Hadoop HDFS, the realization of mass log analysis ofMap/Reduce and the realization of multi-tenancy technology. In the last part of theessay, based on the four logical layer design specific functional modules of theplatform is designed and implemented.