A centralized network security management and control system for local area networks

Abstract

This invention relates to a centralized network security management and control system for local area networks (LANs), belonging to the field of network security. The centralized management and control system of this invention includes: a data acquisition layer, a data storage layer, a data analysis layer, a management and control action layer, and a data presentation layer. The data acquisition layer uses Flume to collect log data and utilizes the RestService of the centralized management and control system to receive data pushed by external applications. The data storage layer uses MySQL and Elasticsearch for data persistence. The data analysis layer uses Flink as its core to implement correlation analysis functions, and performs multi-dimensional analysis of the collected real-time log data based on a rule engine to assess the network security situation. The management and control action layer issues action commands to the mobile terminal management system and the unified authentication management system through a specific HTTP interface. The data presentation layer displays the data to the user in a graphical format. This invention achieves proactive protection of the prototype system through unified management of the security situation within the LAN and timely response and handling of security risks.

Images