【作者】 赵勇；

【导师】 杨树堂；

【作者基本信息】 上海交通大学 ， 通信与信息系统， 2007， 硕士

【摘要】 计算机应用及计算机网络的普及与发展、网民数量的大量增加、电子政务、电子商务、论坛灌水和收发Email等大量的网络应用,引发了对信息安全的强烈需求。试想,如果我们的电脑充斥了计算机病毒、木马,网上账号被窃取、消息被监听、网络服务被阻断,是何种的情况?所以,信息安全相关的教育培训就逐渐成为了各方面各层次广大人民群众的迫切需要。为了配合国家863信息安全综合实验平台的建设,并结合上海市信息安全公共服务平台(一期)的建设,我们对信息安全教学与实验内容、方式及远程多用户并发控制、用户管理等支撑技术进行了广泛、深入的研究。本文主要研究了:第一,远程用户代理主机及针对虚拟代理主机的管理服务程序。强调了对远程用户本地虚拟代理的主要任务、服务方式、主机资源消耗以及代理服务管理程序的主要任务。其中着重研究了如何实现并在一定程度上优化虚拟代理主机,达到单机优化的目的。第二,服务器群扩展与管理。由于虚拟代理主机需要启动虚拟主机、虚拟网卡,主机的CPU和内存耗费巨大,尽管对于单个主机已经做了一定的优化,但为了满足实际需求,需要扩展为服务器群。通过对个体主机资源的评估,动态决定启动或者关闭相关虚拟代理服务器,并利用Mrtg,Rrdtool软件动态显示主机资源耗费情况。并在多台虚拟代理服务器启动的情况下,根据资源占用的情况,由自行设计的服务器群资源评估和服务均衡算法,动态分配服务。第三,对于远程用户进行相关的用户管理。包括组用户IP管理、出入组管理、组成员管理、成员资源管理和规则设定、成员信息存储与权限管理。第四,讨论了上述算法在远程防火墙实验系统中的应用,并介绍了远程防火墙更多还原

【Abstract】 With the development of computer application and network popularization, the number of netizens grows, e-policy, e-trade, posting in BBS, sending and receiving Email, all trigger strong desire for information security. You see, if our computers are filled with virus, Trojan, etc, our account were stolen, network service is stopped, what a terrible thing it is! Therefore, training for the information security has gradually become various kinds of people’s urgent need.In order to cooperate with the national 863 project on integrated information security experiment platform construction, associated with Shanghai public service on information security, we have widely-ranged research on the teaching, experiment, method of information security. And this article takes a great emphasis on distant-user large scale concurrent control experiment of information security with related user management techniques.This thesis mainly focuses:First, we talk about distant user agent machine and virtual agent machine management program. And the main tasks, service method, resource cost of the local virtual agent, main purpose of the agent management program are all studied. Among those, how to realize the optimization of the virtual agent machine to better the single machine is the most important.Second will be the expansion and management of the server clusters. Since the virtual agent machine should start the virtual machine, virtual net card, cpu, memory of the related machine, the total cost is huge. Although we have optimized the single machine in some degree, but the expansion to server clusters’need is still under great demand. According to the assessment of the machine’s resource cost, we can dynamically start or更多还原