Design And Implementation Of Asset Management Within The Ethernet Endpoint Security Management System

With the rapid development of information technology, intranet information security incidents occurred frequently. Lots of hacker attacks, intranet various, worm and Trojan attack and spread by utilizing leaks of OS, which made serious threats for enterprise intranet security. Although multiple methods are implemented on intranet system for active defenses, potential bugs and frail OS still threaten the intranet security. Also, huge losses were caused by the abuse of USB flash and the lack of monitor and statistic mechanism from current computer SW and HW. Traditional network device and boundary based security system shows the defect and cannot solve various issues from intranet endpoint management. Manual endpoint management cannot satisfy the current scale and environment of network, which need to be replaced by new method for unify management. That’s the significance to build up intranet endpoint security system.This paper is based on intranet endpoint security management, expounds the research background and significance by discussing the status and issues faced in current intranet endpoint security in and abroad at first. Then discusses key technologies in intranet security management, including Windows platform leaks, patch management, API and Hooks application. It also discusses request analysis, design principle, system architecture, database and module design of intranet endpoint security management system; the loss/divulge protection module covers functions of endpoint behavior manage, printing monitor, peripheral I/F control; the access authentication module covers functions of endpoint authentication, health check; the asset management module covers functions of monitor and statistic of endpoint assent. Then the paper describes the system deployment, testing and verification solution. It also concludes the intranet security management system and gives suggestions about following development in the end part. After thorough tests, the intranet security management system ran well in actual environment and met the needs of basic intranet endpoint security management requirements for enterprises and institutions; meanwhile, it reduced burden of network administrator, standardize the use of the enterprise intranet endpoint and improve the work efficiency.