The Design Of Network Security Management System Of Power Dispatching Data Network

The network security management system of Guangxi provincial power grid provincial power dispatching data network was completed and put into operation.This system is uninterruptedly collecting and storing status and logging information of data network equipment;generally administrating the information of cell,IP address and link circuit;analyzing,supervising and auditing the security event,security risk and accessing behavior.By relating to the analyzing technique,system manager could rapidly find and locate troubles,effectively handle security event;Using compliance inspection technique,the inspection of cell basic configure,security configuration,interface configuration and routing protocol configuration could be realized.This thesis analyzed the network working status and security situation of Guangxi provincial power dispatching data network,and then,completed the system design,realized the system function,and finished the system test.A full set of security management system of Guangxi provincial power dispatching data network was achieved finally.According to the result of analysis of current business status,power dispatching data network could be divided in two regions in businesses field by using MPLS VPN technology: real-time business region and non-real-time business region.According to the result of analysis in network safety,secure and protective system was established in secure region;meanwhile,secure tactics based on network border was deployed.But,the effective protective means,which are aimed at the cell,link circuit,businesses and related mechanism,are not established.Secure methods of resource management,safety audit and compliance inspection are deficient.Based on the requirement of real safety and network maintenance,ascertaining the protective means of resource management,safety audit and compliance inspection,the design of network safety management information model of provincial dispatching data network was completed,and the design of function modules of network safety and maintenance management system are finished finally.All the function modules include modules of resource management,safety audit,compliance inspection and corresponding submodules.In the same time,in order to realize the feasibility of this system,the technology structure adopted J2 EE platform.Based on this platform,three function modules of resource management,safety audit and compliance inspection of this system and corresponding function sub-modules were realized.The design of logical structure could be defined as three layers: presentation layer,business logical layer,and data layer.The communication between different layers through system interfaces,guaranteeing the data interaction and independence in different layers.In order to guarantee the communication between inner modules and the communication with exterior system,this thesis designed the inner and exterior interface,also realized the interface between different modules.For accurately analyzing cyber-attack incidents and high-risk events in massive network events,this system realized this function by using related analyzing technology,which based on state machine.For testing primary design purpose,the function of devices configuration comparison,network traffic monitor,network traffic intrusion detection and compliance inspection were respectively tested and verified.This thesis adopted advanced data collection engine technology and data analysis engine technology,combining with the real business running in the Guangxi power dispatching data network,completed the design of network security management system of power dispatching data network,effectively satisfied the managing and working requirements in daily operation of the Guangxi power grid dispatching data network.Meanwhile,it could be possible to extend the achievement of this thesis to other power communication network construction.