Design and implementation of a security management system

摘要

In this paper we have designed and implemented a security management system, which is based on the CMISE services. This system provides two security-related system management functions (SMFs) to security management users such as notification of a security event alarm and an audit trail of a security related event. These SMFs are implemented using the osimis-40, OSI network management platform. The target of this security management system is secure X.500 directory services based on the authentication framework specified in the Recommendation X.509. The security system is implemented using OSISEC and its services are data confidentiality, data integrity and non-repudiation of origin. Based on the OSI network management framework we implemented a manager system which administers the keys and provides CMISE services, and also some remote agent systems which provide services for the events concerning the security system, while also interacting with MIB. Access control SMF is being implemented.