【作者】 张晶；

【导师】 刘方爱；

【作者基本信息】 山东师范大学 ， 管理科学与工程， 2010， 硕士

【摘要】 随着IT技术的不断发展,计算机网络技术的应用越来越广泛,计算机的数目也在不断增加。利用局域网在企业内部实现数据集成与数据共享已经成为提高企业竞争力的重要手段。网络设备的状态监控与维护也将成为局域网建设的重中之重,是企事业单位信息化改革和发展的有利保障。对于网络管理人员来说,管理和维护局域网中大量的计算机越来越困难。因此,如何开发出既能准确定位出错机器,又能对机器防患于未然,同时还能使管理人员快速的掌握每个机器的工作状态的网络监控系统显得意义极为重大。局域网是网络应用中的一个主要组成部分,其安全性在国内外越来越受到重视。但是,令人担忧的是,虽然众多的产品和厂商都以局域网安全的概念在提供服务,但其中包含的实际技术和内容却千差万别。这样的情况,一方面对市场和用户形成了误导,不利于解决用户的实际局域网安全问题,造成投资浪费；另一方面也不利于创造良性的竞争环境,阻碍了局域网安全市场的发展。随着网络安全控制理论的发展和计算机技术水平的提高,远程监控系统不仅仅是指对网络设备的监控,它已经成为企业信息管理系统的一个重要组成部分,最大限度地将网络监控的控制过程集成到企业信息管理系统中。针对上述情况,本课题开发并研制了一个具有普遍性的基于局域网的网络安全智能监控系统。本系统采用TCP/IP和SNMP协议标准和面向对象CORBA技术规范,将网络远程维护与网络设备检测和运行状态数据实时分析功能集成为一体,实现了对网络设备的监控分析与维护,提高了网络故障的处理效率,节省了管理资源。本课题还实现了对终端各类数据的实时采集,并对数据进行智能分析,反映机器状态,对系统不安全状态进行报警,同时根据报警分析报告,对远程终端进行反馈操作,及时解决问题。同时,本系统以拓扑图的形式,显示局域网中的计算机,使得管理员对网络结构和机器的工作状态一目了然,便于定位和分析问题点。数据采集模块使用WMI技术对数据进行采集,同时使用二分递归去噪法去掉噪音影响。智能分析引擎模块对终端数据进行了实时的纵向分析,以得出机器的状态。其具体分析包括内存分析、CPU分析、进程分析、埠分析、服务分析、终端综合状态分析、网络状态分析等等。报警部分则采用了仿生报警动态抑制算法,有效抑制了报警泛滥,降低了误报率。在数据通信中应用Petri网建模分析技术对数据传送协议进行了改进,使数据传送更加可靠。本系统的成功开发可以有效的降低企业对机器维护方面所需的人力、物力及财力,减少了重复劳动,提高了工作效率。因此本系统的设计与实现具有一定的理论意义和应用价值。更多还原

【Abstract】 With the development of Information Technology, the Network Technology is extensively used, and the number of computers is on the rise. It has become an important means to improve the competitiveness of enterprises by employing local area networks to realize data integration and data sharing. Monitoring and maintenance of network equipment condition will also be a top priority of local area network building, which is the guarantee of enterprise information reform and development. It becomes more and more difficulty to manage and maintain a lot of computers for network managers. So it is very important to develop an alarming system, which can pinpoint the abnormal states and locate the position of endangering computers. LAN is an indispensable element of network application, and its security is gaining more and more attention at home and abroad. However, it is of concern that although a large number of products and vendors are providing services on the concept of LAN security, actual technology and content varies a lot. In that case, on the one hand the market and users are misguided in resolving the user’s actual LAN security problems, resulting in wasteful investment; the other hand, it is not conducive to the creation of healthy competitive environment, hindering the development of the LAN security market.With the development of network security control theory and computer technology, remote monitoring system not only refers to network device monitoring, it has become an important component of the enterprise information management system. It maximizes the integration of network monitoring control process into the enterprise information management system.To deal with the stated problem, an intranet Intelligent Network Security Monitoring System has been developed in this project. This system can collect various data form terminals real-timely, and analyze those data to reflect states of terminals. When it finds the unsafe states, the system will give alarms to them. Network managers may deal with the problems of terminals remotely according to the report of alarm analysis in order to solve problems in time. Meanwhile, this system can display all the computers of LAN in the form of Topology-graphic, enabling network managers to acquaint themselves with the network structure and find out problems.In addition to collect data with WMI technology, the data collecting module employs algorithm to reduce the effects of noises. The intelligent engine analyzes the data collected form terminals real-timely, and exports the results of analysis which include CPU analysis, memory analysis, processes analysis, services analysis, net-port analysis, integrated states analysis of terminals and network states analysis, etc. The alarm module employs the Bionic alarm algorithm to dynamically suppress alarm in order to rise the accuracy of alarming. Petrinet theory is used in the data communication process to analyze and improve the reliability of data communications.The successful development of the system will effectively reduce labour and cost on device maintainance, saving labour and increasing work efficiency. The design and implementation of the system is of great theoretical and practical significance.更多还原