Adesign And Implementation Of Network Security Audit System

With the advancementof networktechnology and the popularity of the Internet, while the network brings people convenience, the security problem is becoming more and more prominent. The risk from intranet is always ignored and enterprise internal staff is weak in safety awareness, although enterprises deployFirewall, IDS/IPS, or anti-virus system to protect their network.Heavy economic losses are caused by the internalleakageof sensitive data, the violations of network resources or misuse. With the development, and application of the network security audit system,theintranalnetwork security is strengthen, and the enterprise assests are secured.The primary works in this thesis are presented as follows:(1) The present situation of network security audit technology is investigated,the technology principle of BDF framework is researched, and the technology of assemble IP packets, and network protocol reduction is designed.(2) The principle of the systems architecture design is built based on the consideration of practicality, versatility and efficiency, and the system B/S architecture and logic moduls of system functions, the modules, database structure and user interface are designed.(3) The method of dynamic loading protocol and interface standard technology and the technology of mass data storage and RAID disk array application are studied.The system extended to the audit function by the dynamic loading protocol is designed. The system data storage and the efficiency of keyword audit are optimized.(4)The functionality and reliability of the system are tested by simulating different network environments.The pressure test on the performance and stability of the systemis performed by using AvalancheTest Machineunder high load network. The test results verify that the system designed is reasonable and practical.The designed network security audit system runs stably with good performance. The network data are recorded and checked by the system according to the audit strategy, in order to help administrators monitor network securityeffectively, detect and handlethe violations in time, secure information system and network. The security audit function of the system, which provides a comprehensive and accurate data analysis for the administrators to evaluate the network security status and adjust the security policy, effectively help administrators to quickly grasp the trend of network security, adjust the security policy, and respond to new security risks. System has been deployed in many government departments, enterprises and institutions to strengthen the internal network security audit and monitoring, and to standardize the internal network behavior.Good results have beenachieved, and the system achieves the goal of this thesis.