基于策略的客户端集中式安全管理系统研究

Research on policy-based client host central security management system

客户端是企业网安全管理的薄弱环节,目前还没有简单有效的管理工具。基于先进的策略管理思想,构建一个包括用户终端在内的整体式安全管理系统。通过在局域网内统一部署客户端安全策略,较好地解决客户端安全管理的难题。文中简述客户端存在的安全问题、策略管理框架和研究现状,给出系统总体结构设计,重点探讨客户端安全策略和策略代理模块设计的关键技术,具有较大的实际应用价值。

The client side is the weak link of enterprise network safety control, and there isn＇t any simple effective management tool at present. This research based on the advanced policy management constructs a integral security management system including the user terminals. The difficult problem of client side safe ty control has been solved well by unifying the deployment of client side security policy in the local area network. The existent security problems of client side, the policy management frame, and the present sit uation of the research is summarized in this paper. We have given the design of system gross structure, and have discussed the key technologies of client side security policy and the design of policy proxy module with emphasis. It would have very lager actual application value.