Research On Online Service Mechanism Of Security Management For Enterprise IT Systems

With development of computer technology and Internet, there areincreasingly Web online services, providing many convenient technical servicesfor different users, but few can provide customized services for small andmedium-sized enterprises, as the IT resources monitoring online service system.As many small and medium-sized enterprises, they need to know its IT devicesor application servers running state in real time, but common businessmonitoring softwares are to expensive for small and medium-sized enterprises;and open source monitoring softwares are also hard to use because of itslimitations of customized service expansion.In order to solve the above problems, this paper use free open sourcemonitoring software Zabbix as development foundation, and research a set of ITsystem safety management online service mechanism for small andmedium-sized enterprises. This online service mechanism research includes thefollowing two contents: security access control and customized serviceextension.In security access control, this paper provides a multiple domain accesscontrol management model and design corresponding MDRTBAC databasestructure system, then apply it to the Zabbix open source code, to realize anonline service system of IT resources monitoring.In customized service extension, this paper chooses server security assessment services as a representative service, to improve this online servicemechanism.Through this security assessment customized service, theadministrator can detect the vulnerability of server as soon as possible, and thenmodify the improper settings according to the best practice suggestions.This paper researches this IT system security management online servicemechanism for small and medium-sized enterprises. The access control moduleisolates the data of different management domains, and the server securityevaluation module opens the customized service field. So it can provide ITsystem monitoring and security evaluation online services for small andmedium-sized enterprises. It also helps small and medium-sized enterprises toenhance security managent for their IT systems.