System and method for managing security of general network

Abstract

The invention discloses a system and a method for managing security of a general network, and mainly overcomes the defects of poor openness and expansibility and weak functional completeness existing in the prior network security management system. The system mainly comprises peripheral equipment, a security agent terminal, a security management center and terminal management equipment, wherein the security management center applies security technology of network access control, intrusion detection, virus detection and vulnerability management to the security agent terminal through an interface component, a data base module and a user interface component; and under the unified management and control, all security technology is mutually complemented and matched to detect and control network behaviors, so that a distributed security protection system structure in which security strategies are under central management and the security detection is separately distributed is formed. The system and the method have the advantages of flexible configuration, easy expansion, good openness, support of the different level management, and suitability for the security management and protection of the computer network in governments, colleges and universities, and large- and medium-sized enterprises.

Description

technical field [0001] The invention belongs to the technical field of computer networks, in particular to a management system and method related to network security, which is used for centralized management and monitoring of network equipment including routers, switches, firewalls, intrusion detection systems and servers. Background technique [0002] The security protection technology related to network security has been developed so far, and the following effective technical solutions have been formed: [0003] 1. Firewall technology——Firewall is an access control system set between the protected network and the Internet. Its feature is to check network communication at the network entry point. According to the security rules set by the administrator, the premise of protecting internal network security Next, it provides internal and external network communication, and has the characteristics of security, anti-attack, manageability, authentication and encryption, and dynam...

AI Technical Summary

Problems solved by technology

[0016] 1. Poor openness

All kinds of network security management products are mostly launched as subsidiary products of large network equipment manufacturers. The purpose is to realize the linkage and management between various mainstream network equipment and network security equipment produced by them. When it comes to an independent hardware platform, they are not very friendly to other manufacturers' products. Competitors' products and non-mainstream security technologies are difficult to integrate into it. Some existing interactive and linkage products are also based on industry alliances or In the form of technical specifications, other security products or defense technologies must passively comply with their standards if they want to be supported by these platforms, which is often difficult to achieve in the highly competitive network security market

[0017] 2. Poor scalability

[0018] 3. Weak functional integrity

The defects in openness and scalability of network security products also directly lead to incomplete product functions. For example, some products can only provide linkage between firewalls and intrusion detection systems, and some products only query and monitor logs of managed devices. analysis, but cannot provide a valid response

Images