【作者】 吴迪； 徐国胜；

【Author】 WU Di,XU Guo-sheng (Information Security Center,Beijing University of Posts and Telecommunications,Beijing 100876,China)

【机构】 北京邮电大学 信息安全中心；

【摘要】 网络安全管理系统致力于保护局域网内部的安全,企业可以通过添加不同的安全设备来实现对网内主机的保护,但是引用第三方安全设备来实现内网安全管理的系统也带来了新的安全隐患。本文设计了一款基于Nginx的安全设备代理方案,利用Nginx的URL重定向功能和新设计的基于Nginx的通信模块,实现了安全设备系统的跨域跳转和处理高并发事件的能力,大大提高了安全管理系统对大量事件的并发处理能力,减少漏报、误报事件的发生,降低了引入第三方安全设备带来的局限性。更多还原

【Abstract】 NSMS(Network Security Management System) is to protect the security of the internal LAN,and enterprises can also add security devices to protect the host within network.However,the introduction of third-party security devices into the NSMS may also bring new security risks.Therefore, this paper designs a security device proxy based on Nginx;by taking advantage of Nginx URL redirection functionality as well as a newly designed communication module based on Nginx,it can not only achieve cross-domain jumping to security device,but also handle concurrent events with high performance. Finally,experiments shows that this scheme can greatly improve the NSMS’ ability of processing concurrent events and reduce false negatives and false positives so as to reduce the risks of introducing third-party security devices.更多还原