基于NETCONF的防火墙管理系统的设计与实现

发布时间：2018-05-21 10:05

本文选题：防火墙设备 + 管理系统　；参考：《华中科技大学》2014年硕士论文

【摘要】：近年来,随着互联网的飞速发展,网络安全性管理越来越受到人们的重视。防火墙对网络安全的贡献巨大,为保护内网用户信息的安全发挥出了举足轻重的作用。然而,如果没有一套完善的管理系统的支撑,再先进的设备也无法发挥出它的最大的防护作用。因此,开发出一套完善的防火墙管理系统,并以此来配置和管理防火墙设备显得尤为重要。本防火墙管理系统主要用于通过对网络上的防火墙设备进行管理,并以此来保障网络安全。它提供了综合的安全智能、高效实施的安全信息和事件管理解决方案,能够对全网海量的攻击事件、NAT日志进行集中处理,而且能够兼容不同厂商的多种设备,支持海量数据的高度聚合存储及归一化处理。作为一个强大、高效的防火墙设备管理系统,本系统可以对网络中多个防火墙设备进行集中管理,对全网中的域间规则统一部署,对攻击事件信息集中收集并分析,提供了攻击事件分析以及NAT日志审计等功能。在全面熟悉防火墙设备、了解其功能性能之后,完成了防火墙管理系统的总体设计方案,并且在此基础上分析了防火墙系统中的IP地址、服务、安全策略等信息,完成了IP地址管理模块、服务管理模块和域间规则管理模块的详细设计和实现。在深入研究防火墙配置文件的基础上,采用NETCONF协议标准完成了防火墙管理系统,方便网络管理员对防火墙设备的配置。
[Abstract]:In recent years, with the rapid development of the Internet, people pay more and more attention to network security management. Firewall makes a great contribution to network security and plays an important role in protecting the information of intranet users. However, without the support of a complete management system, no advanced equipment can play its maximum protective role. Therefore, it is very important to develop a perfect firewall management system and configure and manage firewall equipment. The firewall management system is mainly used to manage the firewall equipment on the network, and to protect the network security. It provides comprehensive security intelligence, efficient implementation of security information and event management solutions, centralized processing of massive attack events and Nat logs across the network, and is compatible with a variety of devices from different manufacturers. High aggregate storage and normalized processing of mass data are supported. As a powerful and efficient firewall equipment management system, the system can centrally manage multiple firewall devices in the network, unify the rules between domains in the whole network, collect and analyze the attack event information centrally. Provided attack event analysis and NAT log audit and other functions. After getting familiar with firewall equipment and function performance, the overall design scheme of firewall management system is completed, and the information of IP address, service, security policy in firewall system is analyzed. The detailed design and implementation of IP address management module, service management module and inter-domain rule management module are completed. Based on the in-depth study of firewall configuration file, the firewall management system is completed by using NETCONF protocol standard, which is convenient for network administrator to configure firewall equipment.
【学位授予单位】：华中科技大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.08

【相似文献】