Abstract:Security management is one of the five management functions defined by ISO/OSI, which covers two aspects: security of management and management of security. As to management of network security, we give security management requirements for large computer networks, combined with our management experience of managing CERNET. From our experience, the widely used firewalls in the Internet are lacking in the capability to be remotely managed on a large scale, especially multi-vendor network environment. Addressing these problems, the concept of high level security policy management is proposed for large networks. To support high level policy management and collaborative management of multi-vendor firewalls, a definition for a common firewall MIB (CFWMIB) and a common format for the TRAP events record are proposed. For the aspect of security of network management, we present a security architecture which is implemented in our web-based network management system. Flexible authentication and role-based access control mechanisms of the architecture are described. Our ongoing and future research is also outlined.

The Based-Role PMI Model for Access Control in Large Scale Netware System

Secure Information Exchange Model Between PDM Systems

A Task-Role Based Access Control Model with Multi-Constraints

Multi-level Access Control for Collaborative CAD

Design and Implement of Enhanced SNMP Access Control

Dynamic Security Access Control Model Based on System Reliability

The Design of an Useful Security Management Model of PDMS and Its Realization

Design and Implementation of Unified Access Control System Based on LDAP

Research on Information Security Model and Security System Design

Mandatory Access Control Modeling and Security Analysis: A Petri-Nets Based Method

Research and implementation of access control on resource integration

Using Petri Nets to Verify Access Policies in Mandatory Access Control Model

General Model and Implementation of Security Management of PDM

Process-based Access Control Model

Security management for large computer networks

Research of User Access Control for Networked Manufacturing System

A Team-role-based Document Access Control Model

Inconsistency Management of Role Base Access Control Policy

New Study and Implementation of Policy Based Network Management System

Dynamically modified union model combining confidentiality and integrity

Domain-based Integrated Access Control Model