基于网络安全策略的可视化管理平台研究

为实现网络安全策略可视化、精细化和集中化管理，并将网络安全策略自动化管理融入日常网络运行维护（简称：运维）工作中，文章分别从网络安全视角和工作流程视角，研究网络安全策略优化清理技术、安全拓扑域管理技术、建模与分析技术及策略应急处置技术，构建基于网络安全策略的可视化管理平台。该平台提供快速检测不合规安全策略及实时监测网络防火墙状态等功能。在运维管理工作中的实际应用表明，该平台可确保网络安全策略满足合规管理要求与安全控制要求，实现网络安全策略持续合规运维，提高防火墙的应用效果与网络安全防御的整体水平。

Visual management platform based on network security policy

In order to implement the visualization, refinement and centralized management of network security policies, and integrate the automatic management of network security policies into the daily network operation and maintenance work, this paper respectively from the perspective of network security and workflow studied the optimization and cleaning technology of network security policies, security topology domain management technology, modeling and analysis technology, and strategy emergency response technology, built a visual management platform based on network security policy. The platform provided functions such as rapid detection of non compliant security policies and real-time monitoring of network firewall status. The practical application in operation and maintenance management shows that the platform can ensure that network security policies meet the requirements of compliance management and security control, achieve continuous compliance operation and maintenance of network security policies, and improve the application effect of firewall and the overall level of network security defense.