The Design And Development Of Company LAN Safety Monitor System

As the rapid development of computer networks,the information system security is very important. The local area network security is a major part of information system security, and facing grate challenges. It has been showed that the 70% network attacks come from local area network’s local users. So, how to monitor and manage the LAN’ local users becomes an important challenge of LAN’s security. In view of the present situation, the development of a network security monitoring system is very necessary for network security management. The system is composed of management system, host sensor subsystem and network sensor system. Management system installed in the administrator to use the workstation, to send control instruction host sensor and network sensor installed on the user PC, and display monitor results. The security administrator through the management of monitoring strategy for sensor and network sensor configuration host, host sensor on PC machine files, system, process management and monitoring, sensor networks can monitor and audit of network event management, collects the host sensor network and sensor data, warning of the suspicious information.Network sniffer module, LAN trap module, intrusion detection module and E-mail security monitoring module are designed and developed. Network sniffer module based on raw socket captures and analyzes packets. LAN trap module can monitor and record attacker information and intrusion features. Intrusion detection module uses K-Means algorithm to do the cluster analysis to KDD Cup 1999 data sets, build intrusion detection model and then apply this model to predict network data. E-mail security monitoring module utilizes milter recall function provided by sendmail to filter blacklist and whitelist in E-mail. Fanally, the core functions of enterprise van security monitor and management are implemented and the security of enterprise van is guaranteed.Based on communication technology and cryptography, the safe monitoring system of the LAN(local area network) can maintain close control over LAN user’s operation by means of visual management and control of workstation on the LAN. Basically, the safe monitoring system of the LAN could maintenance LAN’s security.