基于域的策略网管中安全管理模型的研究  

Research of model of distributed network security management based on domain for policy-based network management system

作　　者：倪俊[1] 陈晓苏[1] 吴金华[1] 

机构地区：[1]华中科技大学计算机科学与技术学院,湖北武汉430074

出　　处：《计算机工程与设计》2009年第7期1586-1589,共4页Computer Engineering and Design

摘　　要：为提高安全策略的管理效率,对网络管理系统中安全域、移动代理和Web技术进行了研究。面向大规模网络安全设备管理领域,提出了一种具有良好的适应性和跨平台管理的动态集中策略管理解决方案。该方法较好地解决了策略自动分发、一致性和大规模安全策略的集中管理等问题。最后通过简单防火墙系统的实现验证了该体系结构的有效性和灵活性。对实际的网络安全集中控制平台的开发具有指导意义。Abstract： In order to increase the management efficiency of security policy, security domain, mobile agent and web＇ s technology are studied in network management system. Towards the large-scale network security equipment management system, a dynamic and con- centrated policy management settlement method is put forward. The method has good adaptability and muiti-platform management. The problems, such as security policy auto-distribution, consistency and the concentrated management oflarge-scale security policy etc, are solved effectively. Finally the effectiveness and the flexibility of this architectural structure are verified by way of realizing of a simple firewall model system. The guidelines is provided to the development of the real network security centralized control platform.

关 键 词：策略网管 域 移动代理 安全策略 自动分发 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]