【作者】 范宝锋；

【导师】 方勇；

【作者基本信息】 四川大学 ， 通信与信息系统， 2005， 硕士

【摘要】 在当今这个信息化社会中,在网络应用的深入发展和技术进步的同时,非法访问、恶意攻击、病毒传播等网络安全威胁也越来越严重。为了保护网络系统安全,防火墙、IDS、防病毒、身份鉴别、数据加密、安全审计等安全设备在网络系统中得到了广泛应用。虽然这些安全设备能够在特定方面发挥一定的作用,但是大部分功能单一,彼此之间没有有效的统一管理调度机制,不能互相支持、协同工作,从而使各个安全设备的应用效能无法得到充分的发挥。而现代社会生活对网络的高度依赖,使得保障网络的通畅、安全、可靠显得尤其重要。这些都使得网络安全管理技术成为网络技术中人们公认的关键技术。 由于网络中的安全设备、操作系统、应用系统数量众多、构成复杂,异构性、差异性非常大,而且各自都具有自己的控制管理平台。当前网络系统中的硬件平台、操作系统、应用软件等IT系统已变得越来越复杂和难以统一管理。网络安全管理员需要学习、了解不同平台的使用及管理方法,并应用这些管理控制平台去管理网络中的对象(安全设备、系统、用户等),工作复杂度非常大。另外,对大型网络而言,网络安全管理员必须将各个安全设备、系统产生的事件、信息关联起来进行分析,才能发现新的或更深层次的安全问题。管理与安全相关的事件变得越来越复杂。 从网络安全管理员的角度来说,最直接的需求就是在一个统一的网络安全管理平台中监视网络中各种安全设备的运行状态,对安全设备、系统产生的大量日志信息和报警信息进行统一汇总、分析和审计;同时在一个平台内完成安全设备的升级、攻击事件报警、响应等功能。更多还原

【Abstract】 In the information society, as development of network application and technology, network security threat like illegal access, malice attacks and virus spread etc. become more and more serious. In order to protect network system security, security equipment like firewall, IDS, antivims system, ID authentication, date encryption and security audit etc. applies widely in network system. Though these security equipments have certain effect in particular aspect, most of them have single effect and there is no unified managing and coordinating system which can lead them support each other and work harmoniously, therefore, they can not be used sufficiently. Nevertheless, because of intense reliability of network in modern society, keep clear, secure and reliable of network become particularly important and they make technology of network security management become the key of network technologies.There are a lot of security equipments, operating system, applied system and they have complex composition, great difference and independent controlling and managing platform, so the IT system which including hardware platform, operating system and applied software become more and more complex and hard to manage. Managers of network security need to study and understand use and management method of different platform and apply them to manage objects (security equipment, system and client etc.) in network, which lead their work more and more complex. Additionally, for large network, these managers should connect all security equipments, incident raised by system and information to analyze, then, they can find new or deeper security problems. Managing incidents related to security becomes more and more complex.With the point of manager of network security, the most direct demand is lookout exerting status of security equipment in network with a unified management platform and gather, analyze and audit massive daily record and alarm information raised by security equipments and system. Simultaneously, they need to complete escalation, alarm of attack and reaction in a platform The article introduce and analyze present technology of internet security management and research on founding a new solution for whole network security management—Technology of platform for unified network security management to allocate and adjust multi-level and distributive security system in whole network and realize central monitor, unified target management, intellectual audit of network security resources and mutual-action of all kinds of security which can simplify network security management work, promote security level, controllability and manageability of internet and deduct clients’ cost on security management.更多还原