网络安全管理技术研究  

Survey of Network Security Management

作　　者：伏晓[1] 蔡圣闻[1] 谢立[1] 

机构地区：[1]南京大学计算机科学与技术系软件新技术国家重点实验室,南京210093

出　　处：《计算机科学》2009年第2期15-19,54,共6页Computer Science

基　　金：国家863计划(No.2003AA142010)资助课题;江苏省自然科学基金(No.BK2002073)资助课题;2005年国家信息安全重大专项基金项目资助

摘　　要：针对新的安全形势,网络安全管理作为一类更全面、更智能化的综合技术业已得到越来越多的关注,不少相关产品也已经出现在市场上。网络安全管理的作用是通过对各种安全技术和安全产品的统一管理和协同来实现整体的安全。首先总结比较了现有的网络安全管理实现体系结构。然后,回顾了在网络安全管理中占重要地位的安全策略研究的进展,介绍了信息集成、智能分析引擎、协同及通信规范这3种网络安全管理的关键实现技术。最后,分析了网络安全管理当前的不足以及未来的发展趋势。Network security management （NSM） is a new promising technology. It can achieve the global security by comprehensive uniform and cooperative management of all security products and technologies. Currently, researchers in this field mainly focus on the architectures of security management and the security policies for control. Many ideas in other fields, including multi-agent system, network management and so on, have been used to design network security management system. As to the key techniques for implementing NSM, such as information integration and intelligent analyzing engine, there are still so many problems to be solved. Presently NSM has received much attention. In order to make much progress, common standards,just as SNMP in network management, have to be developed by all producers and researchers. In the future,NSM will integrate more techniques and the scope controlled by it will expand from one network to multiple networks. All of these will make it more complex and bring researchers more challenges. This paper gave an overview of NSM. Firstly, current popular architectures of security management were summarized and compared. Then the research progress on security policy, which is very important for security management, was reviewed. After these,three key techniques of security management were introduced. Finally the shortages and new directions in this field were analyzed.

关 键 词：网络安全管理 安全管理体系结构 安全管理协议 协同 安全本体 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TP311.13[自动化与计算机技术—计算机科学与技术]