| With the rapid development of computer and communication technology,computer network is growing popularity in people’s work and life.A lot of enterprises and organizations connect their internal network to Internet in order to share and utilize resources.However,the following problems of network security are becoming more and more serious.The illegal visits,malicious attacks and computer viruses are emerging from the internet.Enterprises and organizations deployed firewalls,intrusion detection systems and other security devices in the internal network to solve the problem of network security,but with little effect.The reason whyis that network attack is changing rapidly and strong concealment,the only equipment played the role of individual,which is difficult to find the intrusion.The lack of information exchange and security-linkage make equipment being a“safety-island” while facing the cyber threat,these situationsmake the equipment unable to give fullperformance while facing network security threat.This paper analyzes the existing problems and demand of network security in railway industry,referring to the domestic and foreign advanced supervising network security idea.This paper design and realize the network security monitor platform based on B/S.The platform realizes the centralized monitoring of IT network assets,filtering and analyzing syslog from various kinds of network security equipment,application and server.The platform could analyze the network security risk,make unified security decision from global perspective,combined with the vulnerably of assets themselves,the comprehensive evaluation of the assets and security domains in the network is carried out to improve the efficiency of network security management.The research of this paper conform the development trend of network and information security,which can be applied to various network as the network security monitoring system.The research has important practical significance. |