Research And Implementation Of Internal Network Security Audit And Media Management System

The ways of disclosing the secret from computers in current internal enterprise include network output, removable storage media out, print out, electromagnetic radiation leaking out and so on. As it is easy to use, difficult to guard against hidden and has big storage capacity, the removable storage media becomes the major way among them. Aiming at the network security problems, this paper designs and achieves a safety audit within the network management and storage media system.From the whole system security, this paper adopts the multi-level security system and ensures the data security in the removable storage media. In the system structures, the system consists of anti-outreach servers, departmental servers and client components. And the entire system is easy to use and has the friendly interface and high scalability. Each module of the system adopts the modularization ideas and every functional component unit can be dynamically loaded and shielded. In the system functions, the whole system is all-round protected through the technologies of data encryption and data storage encryption, access control, ID authentication and audit log and adopting the file system filter driver, the network filter driver, TDI Client driver, API HOOK and hidden process to implement specific technology. As well as ensuring it easy to use, it ensures the safety management of the removable storage media maximally.The designs of the network management and storage media system adopt object-oriented design technologies. Firstly, it analyzes the user requirements and proposes the system models. Then it designs the overall framework of the system the main functional modules. Through the analysis and design of the system, it demonstrates several key techniques and methods. After completed initially, the system is tested in function and performance. The results represent that the network management and storage media system can fully satisfy the users requirements, effectively detect and locate the illegal use of storage media, and effectively purify the internal network environment.Finally,testing the system functions and stability,and expatiate the inadequacies and further research.