一种新的综合安全管理架构的设计与实现  

The Design and Implementation of a Novel Integrated Security Management Architecture

作　　者：胡威[1] 李建华[1] 陈波[1] 

机构地区：[1]上海交通大学电子工程系,上海200030

出　　处：《通信技术》2007年第4期57-59,共3页Communications Technology

基　　金：国家"863"计划基金资助项目(2003AA142070)

摘　　要：传统的安全管理框架缺少对底层数据的整合分析,不能形成有效的网络安全态势信息和风险评估,也不能满足用户对其扩展性和健壮性的要求。文中利用TMN(电信管理网)管理与受管资源分开的思路启发,提出了一种新的综合安全管理框架。新的框架在J2EE分布式架构平台加以实现,能够满足用户对综合安管系统扩展性、易用性和健壮性的需求。Many Problems are found in the Traditional Security Management Architecture. For the lack of the integration and analysis of the low-layer data and equipment information, the security management system is not able to provide the administrators with efficient situation awareness and exact risk estimation. Furthermore, expansibility and robustness can＇ t meet the customers＇ demand to the Integrated Security Management System. According to the architecture of TMN, the novel security management architecture is presented in this paper to separate the security management from managed security resources. The realization of the novel architecture on J2EE platform can meet the demand for the expansibility, usability and robustness of the security management, and provide more supports for security applications.

关 键 词：安全管理 数据挖掘 数据融合 安全事件 

分 类 号：TN929.533[电子电信—通信与信息系统]