Design And Implementation Of Terminal Security Management System Based On Localization Environment

Since the establish of the Internet,the problem of network security has been plagued by network users,which is more threatening to the Internet technology compared with the international underdeveloped China.Internet security is related to national information security and the lifeline of national economy.In recent years,with the rise of China,many European and American countries and lawless elements want to rely on the network to seize intelligence and interests.China's Internet security is facing unprecedented challenges.In the process of realizing internet security,the independent control of the terminal is an important part.The real localzation environment can only be realized by building the entire ecological environment of China's information industry.The terminal or secret PC terminal that needs to deal with sensitive information in localzation environment still has some problems,such as difficult software adaptation,inconvenient management,poor security protection ability,nonstandard use and so on.This paper studies these problems in the development process of localzation environment,designs and develops a cross platform security management system of PC terminal based on localzation environment,which is more conducive to the use of user units that have replaced or started to replace with localzation environment,and improves the office efficiency,the standardization and security of the use of classified PC terminal.Starting from the background and significance of the development of localzation ecological environment in the field of information security in China,this paper analyzes the research status of terminal security management at home and abroad and the problems of PC terminal security management in localzation environment.Based on the current market demand,the function composition and module division of the system are analyzed.Starting from the business process of identity authentication,asset management,policy management,behavior audit and software management,the system is designed and implemented.And the implementation of the main technologies in the system is described in detail,including the transmission of message communication,identity authentication,encryption of mobile storage media.In addition,in order to solve the problem of kernel conflict of security software in localzation environment,an innovative solution is proposed: to avoid using netlink technology,a kernel communication module is designed to realize the communication between kernel and user mode,and then a kernel module is designed to hijack system calls and maintain a hook list to save hook programs of other security software,Then export the interface of registering and removing the hook list for other software to call.The implementation of the scheme can make the terminal security management system as a container,integrate the security software,and provide a unified kernel security interface and user security interface for the security software,reduce the coupling degree between other security software and the operating system,reduce the adaptation difficulty of the security software in the localzation environment,and shorten the engineering cycle.After the systematic test and trial operation of the terminal security management system in the localzation environment,it shows that the function of each module of the system meets the user's needs,and the performance meets the design objectives,which significantly improves the security,standardization and convenience of terminal management of the classified PC terminal in the localization environment.