基于防火墙日志的网络隔离安全审计系统设计与实现

Design and Implementation of Network Isolation Security Audit System Based on Firewall Log

在当前网络攻击方式不断变化的背景下,新出现的安全隔离技术直接阻断网络在链路层上的连接,并进行数据交换。日志是网络安全体系中的重要部分。针对一个网络隔离系统,讨论了日志管理系统的架构、设计实现方法,并在实际中得到应用。

As the network attacking method changes constantly, the emerging safety isolation technology, which can exchange data,interdicts the connect in link layer. Log is a very important part in network safety system. This paper proposed a design of a log management system for a network isolation device, which was in practical use.