基于MVC的互联网审计管理与监控平台的设计与实现

发布时间：2018-07-04 16:30

本文选题：springMVC + 审计管理　；参考：《北京交通大学》2017年硕士论文

【摘要】：近年来,随着IT技术的飞跃和公司业务的迅猛式发展,越来越多的企业在业务工作流程上都实现了数据管理与流程管理的信息化,提高了工作的效率与质量,节约了人力成本。同时,各类大型以及中型企业的安全设备系统越来越庞大、复杂,企业对自身设备数据的依赖度迅速提高,人们在享受着各类安全设备提供的便捷和创造新的增值收益的同时,却也承受着安全设备系统故障带来的重大隐患和风险。本文的审计管理系统与安全信息监控平台是一个对本人实习单位为实现合规性审查,依据云服务安全审查、等级保护等国家安全相关合规制度,指导各地云计算中心进行相关安全工作建设。通过相关网络协议读取网络设备和安全设备的相关参数,以图表的方式形象直观地展示。实时地显示云计算中心的网络安全状态,及时发现网络攻击,用来保证云计算中心的安全运营的Web应用系统。根据用户群体对于本软件系统的需求,进行了全面的分析。结合了以往互联网项目的典型开发案例,确定了 MVC这种分层分工的架构模式,实现控制层与展示层的逻辑分离与数据互通。设计了 SpringMVC+Ibatis的系统框架,完成了持久层、逻辑层和表示层的设计[1]。同时,还对数据库的结构进行设计。总体上本项目有用户登录模块、权限管理模块、安全设备信息管理模块、审计流程管理模块、文档模板管理模块以及安全设备监控模块来使项目模块化,具备高内聚、低耦合的特性。在团队开发过程中本人独立完成了安全设备信息管理模块、审计流程管理模块、文档模板管理模块以及安全设备监控模块的部分内容的设计与实现,在实现过程中进行了必要的单元测试和系统集成测试并协助在服务器端搭建了运行环境、部署项目。目前系统已经部署在公司地方云服务中心为各地方云计算中心的自我建设进行服务,运行状况良好,性能稳定。在今后公司会通过用户体验计划使软件系统在使用中不断地提出新的需求并及时的进行完善。
[Abstract]:In recent years, with the rapid development of IT technology and the rapid development of business, more and more enterprises have realized the information of data management and process management in business workflow, improved the efficiency and quality of work, and saved the cost of manpower. At the same time, the security equipment systems of all kinds of large and medium-sized enterprises are becoming more and more large and complex, and the dependence of enterprises on their own equipment data is increasing rapidly. People enjoy the convenience provided by all kinds of safety equipment and create new value-added benefits at the same time. But also bear the safety equipment system failure brought major hidden dangers and risks. The audit management system and security information monitoring platform of this paper is a national security compliance system based on cloud service security review, grade protection and so on. Guide cloud computing centers to build the relevant security work. The related parameters of network devices and security devices are read through related network protocols and displayed visually and visually in the form of graphs. A Web application system that can display the network security status of cloud computing center in real time and discover network attack in time to ensure the safe operation of cloud computing center. According to the needs of the user group for the software system, a comprehensive analysis. Based on the typical development cases of Internet projects in the past, this paper determines the structure pattern of MVC hierarchical division of labor, realizes the logical separation and data exchange between the control layer and the display layer. The system framework of Spring MVC Ibatis is designed, and the persistence layer, logic layer and presentation layer are designed. At the same time, the structure of the database is also designed. In general, the project has user login module, authority management module, security equipment information management module, audit process management module, document template management module and security equipment monitoring module to make the project modular, with high cohesion. In the process of team development, I independently completed the design and implementation of the security equipment information management module, the audit process management module, the document template management module and the security equipment monitoring module. The necessary unit tests and system integration tests are carried out in the process of implementation, and the running environment is set up in the server side and the project is deployed. At present, the system has been deployed in the company's local cloud service center for the self-construction of the local cloud computing center services, running well, stable performance. In the future, the company will use the user experience plan to make the software system in the use of new requirements and timely improvement.
【学位授予单位】：北京交通大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP311.52;TP277

【参考文献】