基于SNMP的网络管理系统安全方案研究  

Research for network management system security based on SNMP

作　　者：牟鹏至[1] 李飞[1] 罗传军[2] 

机构地区：[1]成都信息工程学院网络工程学院,四川成都610225 [2]天津市气象信息中心,天津300074

出　　处：《计算机工程与设计》2010年第17期3778-3780,3806,共4页Computer Engineering and Design

基　　金：四川省科技厅科研基金项目(20082R0090)

摘　　要：针对省级企业内部网络系统,在路由器、交换机等网络设备开启了SNMPv2协议的set权限下,为保证整个网络系统的安全运行,提出了"基于SNMP的安全管理模型"的设计方案。将防火墙、NIPS作为该模型的"边缘"系统,主要阻止外部网络的应用层攻击和内部网络的病毒、木马攻击,在网络管理系统内部加入非法接入模块,以发现和阻断来自内网的非法接入攻击。实验测试结果表明,该安全管理模型在安全性和扩展性上均能够满足要求。In view of the enterprise interior network system at the provincial level,under the set permission of SNMPv2 protocol is opened in routers,switches and other network equipments,in order to ensure the safe operation of the entire network system,a design scheme is proposed,which is based on the security management model of SNMP is proposed,that referred to firewall,NIPS as the ＂maginal＂ systemof the model,andto excludetheattacks coming fromthe application layer of external networksandtheVirus,Trojan horse of inernal network mainly;In order to detect and block the unauthorized access attacks from the inernal network,the unlawful access module is added to in the network management system.Experimental tests show that this security management model could meet the requirements on both of security and scalability.

关 键 词：简单网络管理协议 安全管理模型 防火墙 网络入侵检测系统 非法接入 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]