防火墙集中管理系统的设计与实现

发布时间：2018-04-15 10:04

本文选题：防火墙管理 + 集中管理　；参考：《北京交通大学》2017年硕士论文

【摘要】：360企业安全是一家致力于企业级安全服务的大型企业。以完善、充分、多元的网络防护,360企业安全领先的安全服务水平与应急响应能力,助力企业用户决胜工业4.0时代。防火墙集中管理系统是为了解决各行业用户急需的终端安全与管理一体化,大数据安全分析等多项问题。360的新一代大数据智慧防火墙支持虚拟系统功能,将防火墙虚拟化成多个相互独立运行的防火墙系统。防火墙集中管理主要是适用于多台防火墙部署的应用场景,是集统一安全管理、统一设备监控、统一审计及报表展现、统一分析及可视化、快速有效处置等众多运维功能于一身的管理运维平台,实现管理、监控、审计、分析、处置统一化。该系统主要包括系统模块、分析模块、配置管理模块三大模块,其中系统模块的包括登录、设备域、设备升级、许可证下发、系统管理五部分,分析模块包括威胁管理、行为管理、处置中心、日志检索、报表管理、网络监控六大部分,配置管理模块包括监控中心、策略管理、对象管理、设备管理、配置任务五大部分。本人在项目中完成了系统需求分析,设计开发及部署上线的全过程,主要包括系统模块的登录、设备域、设备升级三部分;分析模块的处置中心和设备升级两部分;配置管理的策略管理、对象管理和设备管理三部分的功能设计、开发等工作。实现了对安全管理分析中心相关业务数据的可视化。该系统使用python的Django框架实现,最终达到了预期目标,但还有要改进的地方,有待在今后的工作中改进。
[Abstract]:360 Enterprise Security is a major enterprise dedicated to enterprise security services.In order to perfect, fully, multiplex network protection, the enterprise security leading security service level and emergency response ability, help enterprise users to win the industry 4.0 times.Firewall centralized management system is to solve the needs of users in various industries terminal security and management integration, big data security analysis and other issues. 360 of the new generation of intelligent firewalls supporting virtual system functions.Virtualize firewalls into multiple firewall systems that run independently of each other.The centralized management of firewall is mainly suitable for the application scene of multi-firewall deployment. It is a unified security management, unified equipment monitoring, unified audit and report presentation, unified analysis and visualization.Rapid and effective disposal and many other operations and maintenance functions in one of the management platform, to achieve management, monitoring, audit, analysis, disposal unified.The system mainly includes three modules: system module, analysis module and configuration management module. Among them, the system module includes five parts: login, equipment domain, equipment upgrade, license issuance, system management, and the analysis module includes threat management.Behavior management, disposal center, log retrieval, report management, network monitoring, configuration management module includes monitoring center, policy management, object management, equipment management, configuration task five parts.In the project, I completed the whole process of system requirement analysis, design, development and deployment, including login of system module, equipment domain, equipment upgrade, disposal center of analysis module and equipment upgrade.Configuration management of policy management, object management and equipment management of the three parts of the function design, development and so on.The visualization of business data related to security management and analysis center is realized.The system is implemented with python's Django framework, and finally achieves the expected goal, but there are still some improvements to be made in the future work.
【学位授予单位】：北京交通大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP311.52

【参考文献】