Research And Implementation Of High Availability Private Network Security Management System

With the development and popularization of computer science technical, more and more enterprise choose to handle business by using network.Many of them even begin to build their own private network.However,As private network bring convenience to the work,the problems of security show up.Most of this due to the behavior of data leakage,tamper and destruction,which also bring financial loss.That’s why we should pay attention to the problem of private network security management. Some main security problems were discussed in this thesis,then the technique of private network security management was researched,such as the outreach detection technology,the host isolation technique,the information collection technique,on that basis,we realized a private network security management system.The main work of the thesis are the following points:(1)According to private network problems/we design a model of private network management.Then design a model which apply to "Technical Cooperation of HuaWei Information Security Product",which verify the availability of this model.(2)This thesis disigned and implemented the private network security management system.Firstly,explain the requirement and framework of the system.After that,we give the implement of the framework,which include four subsystems.They are the management subsystem,the identification subsystem,the audit subsystem and the monitor subsystem.(3)This thesis proposed a correlation analysis algorithm base on Apriori algorithm,then the algorithm is applied to audit subsystem.The algorithm was optimized by reducing the time of sacnning database and decreasing the scale of candidate set.In the monitor subsystem,this system used SLCA to retrieve policy file.Moreover,it used daemon process to prevent itself form being interrupting.This measures improved the availability of system.(4)On the basis of the implementation,the thesis conducted the evaluation of system from function and performance.Designed the test case and then analyzed test results.After the design of model and system,the thesis finally implement a private network management system,according to the evaluation,we can conclude that the private network security management system has a good feature of high availability.