基于插件技术的网络安全管理架构研究

针对网络安全技术的发展，阐述了构筑网络安全管理平台的重要性，并结合SNMP协议的插件技术的发展现状，给出了一种可伸缩的网络安全管理架构。在该架构中，各种需要管理的安全技术都拥有各自的管理模块对，并且该模块对是易于安装和卸载的。同时，以入侵检测模块对为例，描述了该架构的工作机制和相关技术要点，指出了该架构对SNMP的要求，最后分析了该架构和现有的网络管理体系结构之间的适应性及待解决的问题。

The framework for network security management based on plug-in technology

In order to meet the new requirement of network security, this paper illustrates the emphasis of building management platform for network security and brings forward a scaleable management framework for network security based on the current developing status of SNMP protocol and plug in technology. Each security technology has a pair of manager module under this framework. This pair of manager module can be inserted into or moved from the framework freely. This paper analyzes the execution flow and related outline by example of the work of IDS manager module. This paper also points out the way to improve the SNMP protocol to meet the requirement. This paper analyzes the adaptability of the framework to the current network management architecture and points out the problem should be solved.