System and method for managing security of general network

Abstract

The invention discloses a system and a method for managing security of a general network, and mainly overcomes the defects of poor openness and expansibility and weak functional completeness existing in the prior network security management system. The system mainly comprises peripheral equipment, a security agent terminal, a security management center and terminal management equipment, wherein the security management center applies security technology of network access control, intrusion detection, virus detection and vulnerability management to the security agent terminal through an interface component, a data base module and a user interface component; and under the unified management and control, all security technology is mutually complemented and matched to detect and control network behaviors, so that a distributed security protection system structure in which security strategies are under central management and the security detection is separately distributed is formed. The system and the method have the advantages of flexible configuration, easy expansion, good openness, support of the different level management, and suitability for the security management and protection of the computer network in governments, colleges and universities, and large- and medium-sized enterprises.

Description

technical field [0001] The invention belongs to the technical field of computer networks, in particular to a management system and method related to network security, which is used for centralized management and monitoring of network equipment including routers, switches, firewalls, intrusion detection systems and servers. Background technique [0002] The security protection technology related to network security has been developed so far, and the following effective technical solutions have been formed: [0003] 1. Firewall technology——Firewall is an access control system set between the protected network and the Internet. Its feature is to check network communication at the network entry point. According to the security rules set by the administrator, the premise of protecting internal network security Next, it provides internal and external network communication, and has the characteristics of security, anti-attack, manageability, authentication and encryption, and dynam...

Images