术的使用，能够有效增强网络安全分析与监控平台的安全性，防止攻击者通过
平台获取关键信息，或进行非法篡改等恶意攻击。
关键词：网络安全;安全策略;身份鉴别;数字签名;智能密钥
DOI：10. 11907/rjdk. 182554
：TP309
：A：1672-7800（2019）006-0196-04
Abstract： In a network security analysis and monitoring platform，
various data such as event logs and security policies can be
collected from firewalls， intrusion detection systems and other
network security systems to acquire the analysis and monitoring of
the network. Thus the security of the platform is of great
significance. For protecting the platform， several security
techniques are proposed. Firstly， USB smart key and digital
certificates are used to implement high-security identification.
Multi-level management systems are used to acquire privilege division
and access control. Every operation can be logged and signed
digitally to assure the integrity of the logs for security auditing
and traceability. Secret sharing technique is used to store the split
symmetric key respectively to assure the security of the backup and
restoring of crucial data such as security policies. These security
protection techniques can improve the security of the network
security analysis and monitoring platform significantly and prevent
