基于B/S架构的网络信息安全管理系统的设计与实现

Design and implementation of network information security management system based on B/S architecture

针对当前信息安全管理系统在技术层面和管理层面的不足,设计与实现了一种基于B/S架构的网路信息安全管理系统。该系统由安全管理平台管理中心、WEB控制台、代理中心与处理中心组成,并基于安全监控管理、安全策略管理、事件分析处理、安全事件响应和系统管理等5个子模块,将设备和人员等诸多要素纳入到安全管理系统中,实现网络信息安全管理的系统化、流程化及规范化。各模块的软件实现与测试结果表明,该系统能快速处理和响应用户的各项操作,并能有效提高传统C/S架构的安全性、可重用性及可扩展性。

In view of the technical and management deficiencies of the current information security management system,a network information security management system based on B/S architecture is designed and implemented. The system consists of the security management platform management center,agent center and processing center. Based on five sub-modules of security monitoring management,security policy management,event analysis and handling,security incident response and system management,the system includes many elements such as equipment and personnel In the safety management system,systematic,process and standardization of network information security management are realized. The software implementation and test results of each module show that the system can quickly process and respond to users＇ operations and can effectively improve the security,reusability and scalability of the traditional C/S architecture.