CNG TY U T PHT TIN CNG NGH IN T - VIN THNGD N 5THIT K MC CAO [!"#$Ngi lp: Pham Hng Sn Ngy lp: /./......................Ngi xem xt: Nguyn ! Hinh........................Ngy lp: /./......................Ngi "uy#t: ......................................................Ngy "uy#t: /./......................$%/&%$'12.BM.QTPM.EJC, (v1.0)D an 5 Phin bn: 1.0M%C &%C1. G THU CHUNG.........................................................................................................................1.1. Mc ch............................................................................................................................................1.2. M t h thng phn mm.................................................................................................................1.3. Ti liu lin quan...............................................................................................................................1.4. Khi nim, thut ng.........................................................................................................................2. G THT V RNG BUOC.............................................................................................................2.1. Mi trung Server.............................................................................................................................2.2. Cc mc tiu uu tin.........................................................................................................................2.3. Phuong n pht trin phn mm.......................................................................................................2.4. Cc rng buc v gi thit khc........................................................................................................3. KN TRC SN PHM...................................................................................................................3.1. Kin trc phn mm..........................................................................................................................3.2. M hnh trin khai............................................................................................................................3.3. M hnh vt l..................................................................................................................................4. THT K GAO DN.....................................................................................................................4.1. Giao din ng nhp.......................................................................................................................4.2. Giao din mn hnh chi huy.............................................................................................................4.3. Giao din gim st h thng............................................................................................................4.4. Giao din qun l su kin................................................................................................................4.5. Giao din qun l vt tu..................................................................................................................4.6. Giao din qun l cn b.................................................................................................................4.7. Giao din qun l k hoach.............................................................................................................4.8. Giao din cnh bo.........................................................................................................................4.9. Giao din cu hnh h thng...........................................................................................................5. THT K MODULE........................................................................................................................5.1. Module thu th p v qun l Log Firewall qua h thng SEM..........................................................5.2. Module Mediation Services.............................................................................................................5.3. Module mn hnh chi huy................................................................................................................5.4. Module gim st h thng...............................................................................................................5.5. Module qun l su kin...................................................................................................................5.6. Module qun l vt tu......................................................................................................................5.7. Module qun l cn b....................................................................................................................5.8. Module qun l qun l k hoach....................................................................................................5.9. Module qun trjh thng................................................................................................................5.10 Co s d liu tp trung...................................................................................................................6 CC YU CU CHC NNG.........................................................................................................6.9 Khi chc nng mediation...............................................................................................................6.10 Khi chc nng hin thj mn hnh chi huy.......................................................................................6.11 Khi chc nng gim st h thng..................................................................................................6.12 Khi chc nng qun l su kin......................................................................................................6.13 Khi chc nng qun l vt tu.........................................................................................................6.14 Khi chc nng qun l cn b.......................................................................................................12.BM.QTPM.EJC, (v1.0) Trang 2/41D an 5 Phin bn: 1.06.15 Khi chc nng qun l k hoach...................................................................................................6.16 Khi chc qun l h thng.............................................................................................................7 PHU LUC.........................................................................................................................................7.9 Tiu chun lp trnh.........................................................................................................................12.BM.QTPM.EJC, (v1.0) Trang 3/41D an 5 Phin bn: 1.0&'CH ( THAY )ITT N*+ ,-./ 0123 45+ M67 N/8312.BM.QTPM.EJC, (v1.0) Trang 4/41D an 5 Phin bn: 1.0!" GI9I THIU CHUNG!"!" M67 4:71()! *+!h !,- ti li#u nh.m *- /- !0!h nh1n t2ng 3u-n 45 h6 7 th8ng *9m :9; -n t;n mang !h; u8! Ph?ng@ Ah0i 3u0t gi9i ph0p t/iBn Ah-i AC thuD 7t !,- El!;m.!";" M< 0= 1> 01?./ @1A. BCBH# th8ng *9m :9; -n ninh !h; h6 7 th8ng mang th;ai >u8! Ph?ng nh.m ghi l;g@ *0nh "Fu !0! nghi ng xDm nhD 7p@ AGp thi *- /- !9nh :0; !h; ngi *i5u hnh. HH t/I ngi 4D 7 n hnh the; "Ji 4 3u9n lK t/-ng thiLt :G t/;ng h6 7 th8ng -n ninh mang 3u8! ph?ng. H> 01?./ @1A. BCB 0DE./ ,F G. 5 4HI7 71+2 J8B K @1L. 1> M- HN O01?./ PGE 7GE 2. .+.1 0L O@ 0D-./H# th8ng :0; !0; -n ninh tp t/ung !ung !Fp !0! :0; !0; !M t+nh !hFt t2ng hIp 45 t1nht/ang -n ninh mang >SN>P hi#n tai@ -n ninh mang t/;ng mOt Ah;9ng thi gi-n h-y th8ng A6 -n ninh the; PQ Ai#n@ the; m! *O nguy hiBm@ the; nhMm *8i tIng 3u-n tDm Rh=ng 3u- !0! !=ng !) t/Q! 3u-n hM- "S li#u@ h# th8ng :0; !0; -n ninh tp t/ung *em *Ln !h; ngi !hT huy nhSng th=ng tin !Un thiLt.- H> 01?./ JQ@ RS 1ET71 8 U-=. JV ./-W. JF7V-i t/? !,- h# th8ng lp AL h;a!h 4 3u9n lK ngun lQ! l 3u9n lK th=ng tin !hung !0! ngun lQ! W!;n ngi@ t/-ng thiLt :G@ 4t tX hi#n !M 4 t1nh t/ang PYn Png !,- ngun lQ!@ tZ *M !ung !Fp !=ng !) t/Q! 3u-n *B ngi !hT huy !M thB phDn :2 ngun lQ! !h; tZng nhi#m 4) !) thB@ hH t/I ngi !hT huy t/;ng 4i#! ta;@ the; "Ji@ *i5u !hTnh@ t2ng ALt@ :0; !0; 45 t;n :O 3u0 t/1nh thQ! hi#n !0! nhi#m 4). PhDn h# >u9n lK ngun lQ! PhDn h# >u9n lK AL h;a!h@ nhi6 7m 4)!"K" T8+ J+>- J+N. U-2.[0! ti li#u li6n 3u-n *Ln 4i#! thiLt AL h# th8ng: Ri li#u S\S@ S\] Ri li#u m= t9 ^Pe!-Pe!"X" K1G+ .+>BY 01-Q0 ./Z(TTT1-Q0 ./ZY 0[+N0 0\0G+=+ 01:71 G1+ 71]$ RPl3P N_N& ]];S12.BM.QTPM.EJC, (v1.0) Trang 5/41D an 5 Phin bn: 1.0` ai/eb-ll/cPS' >SN>Pdefg12.BM.QTPM.EJC, (v1.0) Trang 6/41D an 5 Phin bn: 1.0;" GI^ THIT V_ `_NG aUbC;"!" M^E\l@ u9n lK ngun lQ! Wu9n lK AL h;a!h >u9n lK t/uy !D 7pN ou ti6n &:R+nh 2n *Gnh !,- h# th8ngN ou ti6n `: 0p ng tFt !9 !0! t+nh nqng !,- h P "Q 0nN ou ti6n ': sh9 nqng :9; t/1@ !huyBn gi-; h# th8ng@ t+nh t/;ng P0ng !,- mt ngun 4ti li#u "Q 0nN ou ti6n d: Rhi gi-n "Q 0n ph9i h;n thnh *ung AL h;a!h;"K" P1He./ G. @1G0 0D+f. @1A. BCBN vp ")ng 3uy t/1nh phUn m5m the; m= h1nh igile !,- !ty El!;m 4 tuDn the; ALh;a!h lp t/1nh *t *I! ph6 "uy#t tZ _i0m *8! "Q 0nN RhiLt AL hwng *8i tIng@ Pj ")ng ng=n ngS thiLt AL ^(h@ !=ng !) Ei@ ViPi;N Ng=n ngS lp t/1nh : Sj ")ng ng=n ngS lp t/1nh k-4-@ k]s $.f h;x! mwi hn. N RePt tuDn the; 3uy t/1nh tePt 4 Pj ")ng tePtt/-!Ap/;.N >u9n lK !Fu h1nh Pj ")ng !=ng !) l SVNN >u9n lK !=ng 4i#! t/6n t/ell;;"X" CG7 D8./ P-*7 8 /+= 01+S0 R1G7- RhiLt AL phUn m5m *9m :9; u ti6n h;n thnh !0! !h! nqng !h+nh !,- h# th8ng@ *9m :9; ngi "yng Ah-i th0! Pj ")ng Ahi ALt thu! thi gi-n "Q 0n- [0! !h! nqng ph) t/I *I! thQ! hi#n P-u Ahi !0! !h! nqng !h+nh *t h;n thnh12.BM.QTPM.EJC, (v1.0) Trang 7/41D an 5 Phin bn: 1.0K" KIN T`gC (^N PHhMK"!" K+S. 0D]7 @1A. BCB12.BM.QTPM.EJC, (v1.0) Trang 8/41D an 5 Phin bn: 1.0H6 7 th8ng *9m :9; -n ninh -n t;n mang xDy "Qng the; ti6u !huzn -n t;n !=ng ngh6 7 th=ng tin 4 :9; mD 7t !,- c. U-=. JV jF R+>.Figure $ : %anh &'ch & kin12.BM.QTPM.EJC, (v1.0) Trang 14/41D an 5 Phin bn: 1.0X"5" G+2E ,+>. U-=. JV Q0 0HFigure ( : )u*n !+ ,-. ."X"v" G+2E ,+>. U-=. JV 7G. P*Figure / : S0 12 .3 ch4c 10n ,512.BM.QTPM.EJC, (v1.0) Trang 15/41D an 5 Phin bn: 1.0X"w" G+2E ,+>. U-=. JV RS 1ET71Figure 6 : )u*n !+ k7 hochFigure 8 : 9- k7 hoch12.BM.QTPM.EJC, (v1.0) Trang 16/41D an 5 Phin bn: 1.0X"x" G+2E ,+>. 7=.1 PGEFigure 1: : %anh &'ch c*nh ;'oX"y" G+2E ,+>. 7z- 1n.1 1> 01?./12.BM.QTPM.EJC, (v1.0) Trang 17/41D an 5 Phin bn: 1.05" THIT K MODU&s 5"!" ME,-Jd 01- 01L O@ 8 U-=. JV &E/ p+Ddq2JJ U-2 1N O 01?./ (IsMScE( l gi9i ph0p *I! ALt hIp :ni & gi9i ph0p Sc( 4 SE(. ScE( l mOt gi9i ph0p h;n!h+nh@ *Uy *, !h; php !0! t2 !h! thQ! hi#n 4i#! gi0m P0t !0! PQ Ai#n -n t;n th=ng tin !h;mOt mang lwi. [0! thnh phUn !h+nh !,- ScE( :-; gm: thnh phUn thu thp nht AK@ thnhphUn phDn t+!h@ thnh phUn lu t/S@ thnh phUn 3u9n t/G tp t/ung. Ng;i /- !?n !M !0! thnhphUn Ah0! nh: thnh phUn gi0m P0t Netb;/A P-!A-ge n m! lwp f t/;ng m= h1nh mSc@ !0!m;"ule ta; :0; !0; W[;mpl-in!e \ep;/tX. . [0! !h! nqng !h+nh !,- h# th8ng :-; gm:N Rhu thp th=ng tin li6n t)! 45 nguy ! 4 PQ !8 -n t;n mang.N Nhn "ang@ xj lK nh-nh@ !9nh :0; Pwm !0! nguy ! 4 PQ !8 -n t;n mang.N HH t/I *i5u hnh ph9n ng nh-nh 4wi !0! PQ !8 -n t;n mang.H# th8ng P} thu thp 4 xj lK nh-nh th=ng tin tZ tFt !9 !0! ngun th=ng tin !9nh :0;tZ tFt !9 !0! thiLt :G -n ninh mang: a~@ cPS/c]SH# th8ng gi0m P0t -n t;n mang tp t/ung thng :-; gm !0! thnh phUn P-u *Dy:a. Thnh phn thu thp log (log collector): Rhnh phUn thu thp l;g *Mng 4-i t/?n nh l gi-; "i#n ALt n8i t/Q! tiLp *Ln !0! thiLt:G !Unthuthp43u9nlKl;g. [0!l;gP}*I!thuthp4lut/Stamthi tai E4ent[;lle!t;/@ P-u *M P} *I! !huyBn *Ln RhiLt :G E4ent P/;!ePP;/ *B tiLn hnh phDn t+!h@ P; P0nh12.BM.QTPM.EJC, (v1.0) Trang 18/41D an 5 Phin bn: 1.0tng 3u-n. (xt Ah0!@ !0! thiLt :G *xt tai t/ung tDm !M thB *zy l;g t/Q! tiLp l6n thiLt :G phDnt+!h PQ Ai#n E4ent P/;!ePP;/. [0! !h! nqng !h+nh !,- thnh phUn h;g !;lle!t;/ :-; gm:N Rhu thp t;n :O "S li#u nht AK tZ !0! ngun thiLt :G@ ng ")ng :-; gm !9 !0!thiLt :G 4t lK 4 thiLt :G 9;.N HH t/Ithu thp l;g 3u- SyPl;g h;x! :.ng !0! gi-; th! nh: k]u9n lK 4 *i5uhnh -n t;n mang tp t/ung. [0! "S li#u m nM 3u9n lK :-; gm !0! "S li#u ph)! 4)h;at *Ong !,- !0! phDn h# u9n lK ngun lQ! 4 phDnh# >u9n lK AL h;a!h 4 *i5u ph8i !{ng nh !0! "S li#u 3u9n t/G@ 4n hnh !,- h# th8ng.sh8i ny *ng thi !ung !Fp !0! phng th! !h; php *i5u AhiBn 4 xj lK !0! t/uy nhp4; !0! "S li#u t/6n. x! *iBm !h+nh !,- Ah8i ! Pn "S li#u: Dy "Qng t/6n nhSng n5n t9ng !,- h# 3u9n t/G ! Pn "S li#u thuO! l;ai manh nhFt hi#nn-y l m/-!le@ t/uy !p nh-nh 4 !M !Fu t/u! phDn 3uy5n h]iP. [M thB 3u9n t/G *I!lIng "S li#u lwn 4wi !0! *8i tIng Ah0! nh-u. [0! *8i tIng 3u9n lK " "ng th6m:wt !0! thuO! t+nh 4 *8i tIng !;n the; nhi5u m! PDu tyy K. 0p ng *I! 4i#! t8i u hM- giS- lu t/S th=ng tin 4 xj lK !hn l! "S li#u *B t8iu hM- ti nguy6n !,- m0y !h, t/0nh 4i#! xung *Ot "S li#u Ahi !M 3u0 nhi5u lungth=ng tin *I! xj lK *ng thi. 0p ng *I! nhu !Uu lu t/S "S li#u t/;ng thi gi-n "i 4 Ah8i lIng lwn. 0p ng Ah9 nqng t/uy nhp Ah8i lIng "S li#u lwn 4wi tUn xuFt lwn mOt !0!h hi#u3u9. 9m :9; t+nh *O! lp "S li#u h-y PQ :Ft :iLn !,- !hng t/1nh ng ")ng *8i 4wi !0!th-y *2i 45 !Fu t/u! t/;ng m= h1nh "S li#u. HH t/I !0! ng=n ngS !-; !Fp !h; php ngi Pj ")ng *Gnh ngh- !Fu t/u! "S li#u@ t/uynhp "S li#u 4 th-; t0! "S li#u. 0p ng Ah9 nqng 3u9n lK !0! gi-; "G!h t/uy nhp *ng thi 4; ! Pn "S li#u tZnhi5u ngi Pj ")ng tai !yng mOt thi *iBm@ han !hL Ah9 nqng t/uy nhp *Ln !0! "Sli#u :ni nhSng ngi Pj ")ng Ah=ng *I! !Fp php 4 !M Ah9 nqng AiBm t/- t+nh *ung*n !,- [S]h. 0p ng Ah9 nqng ph)! hi "S li#u@ Ah=ng lm mFt m0t "S li#u 4wi !0! lHi h# th8ng. 0p ng !0! y6u !Uu 45 th-; t0! "S li#u :-; gm:o R1m AiLm th=ng tin *I! lu t/S t/;ng [S]h. 12.BM.QTPM.EJC, (v1.0) Trang 25/41D an 5 Phin bn: 1.0o Rh6m th=ng tin mwi 4; [S]h. o ;0 th=ng tin tZ [S]h. o Rh-y *2i th=ng tin *I! lu t/S t/;ng [S]h.[0! l;ai "S li#u *I! lu t/S 4 xj lK t/;ng hwp ]S li#u: PhDn h# :0; !0; -n ninh tp t/ung: "S li#u !Fu h1nh ! Pn@ "S li#u PQ Ai#n@ "S li#u!9nh :0; PhDn h# >u9n lK ngun lQ!: "S li#u ngun lQ! PhDn h# >u9n lK AL h;a!h 4 *i5u ph8i: "S li#u nhi#m 4) ]S li#u 3u9n t/G h# th8ng: rile !Fu h1nh@ "S li#u h;at *Ong@ l;g h# th8ng 5"!! T:71 1I@ (0EDB(1+dJ, 8 AJ/Ejd7(;"un t+!h hIp St;/mShiel" 4 ilg;Pe! l m;"un lm !h; phUm m5m ilg;Pe! hiBu *I! ri/eb-ll Pt;/mPhiel".(;"ule t+!h hIp St;/mShiel" 4 ilg;Pe! P} thQ! hi#n 4i#! t/uy xuFt lFy "S li#u !,- ri/eb-llSt;/mShiel" P-u *M !;n4e/t rile ny *B ilg;Pe! hiBu *I!.[hng t/1nh !huyBn *2i *Gnh "ang P} lFy "S li#u !Fu h1nh !,- St;/mShiel" P-u *M !;n4e/t "S li#u ny@ *zy rile *Gnh "ang iSi P-u Ahi xj lK 4; th m)! ilg;Pe!12.BM.QTPM.EJC, (v1.0) Trang 26/41Chuong trnh chuyn i jnh dangChuong trnh chuyn i jnh dangStormShield ilg;Pe!D an 5 Phin bn: 1.0v CC Y}U CU CHC N~NGv"y K1?+ 71l7 .t./ Bd,+20+E.(e"i-ti;n lm nhi#m 4) *ng :O !0! :9ng !;nrig tZ ": p;Ptg/eP t/6n h# th8ng ScE( 4 lu "S li#u l;g /e-l time 4; ]-t-:-Pe m/-!le. ]S li#u t/6n h# th8ng ScE( *I! lu t/S 4 3u9n lK :.ng & "-t-:-Pe: "-t-:-Pe P;Ptg/eP 4 "-t-:-Pe i/iel.N ]-t-:-Pe P;Ptg/eP: lu t/S t;n :O !0! "S li#u !Fu h1nh !,- h# th8ng ScE( 4 !0! "S li#u tFn !=ng P-u Ahi *I! thu thp 4 phDn t+!h. N ]-t-:-Pe i/iel : lu t/S "S li#u l;g tam thi !,- h# th8ng ScE( P-u Ahi thu thp *I! tZ !0!ri/eb-ll th=ng 3u- !0! e4ent !;lle!t;/P. hu K "S li#u ny !hT *I! lu t8i *- f ngy t/;ng h# th8ng ScE(. ]; t+nh !hFt !Un lu t/S@ phDn t+!h 4 3u9n lK l;g lDu "i@ Ah8i !h! nqng me"i-ti;n !Un lm nhi#m 4) *ng :O & "-t-:-Pe ny 4; $ ! Pn "S li#u tp !hung Wm/-!le $$gX. Ruy nhi6n Ah=ng ph9i tFt !9 !0! "S li#u *5u *I! *ng :O@ m !hT *ng :O !0! :9ng ph)! 4) :uPinePP !,- h# th8ng.(nFUGH001 Hin thj thit bj mangH thng ly thng tin ca thit bj mang (bao gmthng tin ja l, thng tin kt ni, thng tin thit bj) v hin thj trn bn FCFUGH002 Hin thj kt ni mangH thng ly thng tin kt ni, v hin thj kt ni trn bn .FCFUGH003 Gim st theo topo mangChc nng qun l h thng trn topo mangFCFUGH004 Lc theo on vj Lc cc thit bj mang theo on vjFCFUGH005 Hin thj danh sch cnh bo an ninhCc cnh bo an ninh uoc hin thj trn giao dingim st khng gian mangNCFUGH006 Phng to, thu nh bn Chc nng cho php ngui qun trj phng to haythu nh ti tng khu vuc ja l trn bn NC(.Bao gm cc chc nng con l Danh sch su kin, Thng k su kin v iu traID C1l7 .t./M< 0= 71l7 .t./ Ml7 H-0+N.a^]dEV(%%$]-nh P0!h PQ Ai#n[h! nqng ny !h; php ngi "yng xem "-nh P0!h !0! PQ Ai#n the; thi gi-n thQ!@ ngi "yng !M thB lQ- !hn xem the; mOt P8ti6u !h+ nh thi gi-n 4 m! *O nguy hiBm 4 *0nh "Fu the; "Ji mOt PQ Ai#na[a^]dEV(%%&em th=ng tin!hi tiLt PQ Ai#n[h! nqng ny !h; php ngi "yng xem !hi tiLt th=ng tin 45 mOt PQ Ai#na[a^]dEV(%%` Rh8ng A6 t;p ipngun[h! nqng ny th8ng A6 $% ip ngun !M nhi5u PQ Ai#n nhFt *I! Pp xLp the; th tQ gi9m "Un@ :iBu * th8ng A6 *I! thB hi#n a[12.BM.QTPM.EJC, (v1.0) Trang 32/41D an 5 Phin bn: 1.0"wi "ang !Ota^]dEV(%%'Rh8ng A6 t;p ip*+!h[h! nqng ny th8ng A6 $% ip *+!h !M nhi5u PQ Ai#n nhFt *I! Pp xLp the; th tQ gi9m "Un@ :iBu * th8ng A6 the; "ang !Ota[a^]dEV(%%dRh8ng A6 the;l;ai PQ Ai#n[h! nqng ny th8ng A6 d l;ai PQ Ai#n xuFt hi#n nhi5u nhFt *I! Pp xLp the; th tQ gi9m "Un@ :iBu * th8ng A6 "ang Piea[a^]dEV(%%eRh8ng A6ngng[h! nqng ny th8ng A6 !0! PQ Ai#n !M m-n-gitu"e g 4 $% !,- mHi mOt ri/eb-ll *I! !h; php hiBn thG t/;ng h# th8nga[a^]dEV(%%fRh8ng A6 the;m! *O nguyhiBm[h! nqng ny th8ng A6 xem mHi m! *O nguy hiBm !M :-; nhi6u PQ Ai#n a[a^]dEV(%%g i5u t/-[h! nqng ny !h; php thQ! hi#n *i5u t/- the; *8i tIng@ "G!h 4) h-y !0n :O@ ALt 3u9 nhn *I! l "-nh P0!h !0! PQ Ai#n li6n 3u-n 4 t;p; *i5u t/-a[v"!K K1?+ 71l7 .t./ U-=. JV Q0 0H2" {-=. JV Q0 0HY 0D2./ 01+S0 PmID C1l7 .t./ M< 0= 71l7 .t./ Ml7 H- 0+N.a^]d%%$ hi6 7t A6 :-; !0;3u9n lK thiLt :G[h! nqng ny !h; php hiBn thG tFt !9 !0! :0; !0; 45 t/-ng thiLt :G "; ngi 3u9n t/G nhD 7p a[12.BM.QTPM.EJC, (v1.0) Trang 33/41D an 5 Phin bn: 1.0t/w! *M:N u9n lK th=ng tin !0nhDn !,- !0n :O[h! nqng ny !h; php 3u9n lK th=ng tin !0 nhDn: N R6n@ tu2iN_iwi t+nhN >u6 3u0nN Ni n hi#n n-yN n 4G lm 4i#!N Ngy :t *Uu lm 4i#!N R1nh t/ang h=n nhDn N R1nh t/ang P! AhpeN [hu th+!ha[a^]d%$%>u9n lK t2 :9; *9mAC thut ! *OngWu9n lK :0; !0;th8ng A6[h! nqng ny !h; php hiBn thG tFt !9 !0! l;ai :0; !0; 45 4i#! *i5u ph8i !;n ngi "; ngi 3u9n t/G nhD 7p t/w! *M:N