Design and implementation of a security management system

Author

Song, Wang-Cheol ; Baek, Lee-Hyun ; Kang, Chang-Eon

Author_Institution

Dept. of Electron. Eng., Yonsei Univ., Seoul, South Korea

fYear

1995

fDate

3-7 Jul 1995

Firstpage

261

Lastpage

264

Abstract

In this paper we have designed and implemented a security management system, which is based on the CMISE services. This system provides two security-related system management functions (SMFs) to security management users such as notification of a security event alarm and an audit trail of a security related event. These SMFs are implemented using the osimis-40, OSI network management platform. The target of this security management system is secure X.500 directory services based on the authentication framework specified in the Recommendation X.509. The security system is implemented using OSISEC and its services are data confidentiality, data integrity and non-repudiation of origin. Based on the OSI network management framework we implemented a manager system which administers the keys and provides CMISE services, and also some remote agent systems which provide services for the events concerning the security system, while also interacting with MIB. Access control SMF is being implemented

Keywords

authorisation; computer network management; data integrity; open systems; security of data; CMISE services; MIB; OSI network management framework; OSISEC; Recommendation X.509; access control; audit trail; authentication framework; data confidentiality; data integrity; manager system; notification; origin nonrepudiation; osimis-40 OSI network management platform; remote agent system; secure X.500 directory services; security event alarm; security management system; security management users; security related event; system management functions; Access control; Computer architecture; Computer network management; Computer security; Data security; Design engineering; Engineering management; Information management; Information security; Open systems;

fLanguage

English

Publisher

ieee

Conference_Titel

Networks, 1995. Theme: Electrotechnology 2000: Communications and Networks. [in conjunction with the] International Conference on Information Engineering., Proceedings of IEEE Singapore International

Print_ISBN

0-7803-2579-6

Type

conf

DOI

10.1109/SICON.1995.526058

Filename

526058