Design And Implementation Of IDC/ISP Information Security Management System Based On DPI

With the application of Internet in recent years,especially the explosive development of the mobile Internet,network applications change rapidly.The new form in the rapid development has also exposed the practical problems of network content of the country has always attached great importance to uneven in quality,and promote the healthy development of Internet and information industry,and vigorously to create a green orderly market.The Internet Data Center(IDC)as one of the most important computer network and information service infrastructure,bringing together a large number of network and information resources,because of this,make it become the focus of the network information security management object,strengthen the network content management increasingly urgent task.In view of this situation,for the protection of the Internet Data Center(IDC)and Internet access(ISP)and orderly operation of the market,the State Ministry has issued a series of targeted management documents,requirements of the IDC/ISP business enterprise including infrastructure operators,must establish the information security management system(ISMS,below),to focus on strengthening the supervision of IDC/ISP services,in order to protect the national Internet environmental health,and guard against all kinds of security risks,prevent the spread of bad information.Under the new situation of information security supervision for content level,the traditional identification methods based on IP,port and protocol have been unable to meet the actual needs.With the maturity of Deep Packet Inspection(DPI)technology,it can be applied in high speed,large bandwidth network,and can realize deep analysis of the data content of application layer.This paper designs and implements an information security management system based on DPI technology,which meets the requirements of supervision,and realizes the timely detection and disposal of bad information.The traffic data collection,data analysis,network deployment and load balancing,keyword detection and ISMS to achieve the relevant theory and technology,methods are discussed and compared in detail the ISMS overall design principle,structure,orientation,each functional module design and implementation,and the key technology of realizing the system of deep research.After testing the function of the system,the network traffic with specific keyword is successfully identified and blocked,which is consistent with the functional requirements.The actual operation proves that it can meet the needs of information security management work.