Design And Implementation Of Unified Network Security Management Centre

With the development of the Internet and the popularization of information technology, the network system has become the foundation platform sustaining so many industries’ businesses. The network security will affect the normal business operation even the national security and social stability. Therefore, a variety of network security products are applied to protect network systems security on different aspects. However, network security products bring about new problems:most functions of these products are decentralized, unassociated and difficult to realize unified management; there are huge differences between management platforms of various security products and great working complexity for security managers to learn and master the usage and management methods. It is error-prone for large-scale networks or distributed systems.This paper we present an architecture of unified network security management platform,which is based on the modularization and supported hierarchy management, because of the issues we presented above.The main idea of this paper aims to design and implement security management center,a key modular of unified network security management platform. By designing rich configuration command plugins,we realized centralized management for the security devices of different manufacturers and types. moreover, applying the conflict detection and resolution into the unified network security management platform which will further improve the security of the platform. Centralizing and storing the events generated by the security domain and performed in unified data format for the manager to check, analyze and process.Using B/S structure to provide a unified management interface for the whole security domain, and providing tree layout algorithm combine with JGraph to displaying network topology which help network manager to monitor and manage the network usefully.This paper carries out functional tests on the security management center. The test results shows that the security management center in this paper can achieve the management and control on the mainstream network security and make the network security management from of complication into simplicity and more efficiency. Finally, deficiency and future work plans are summarized in the system design.