一個利用行動代理人解決企業外購系統服務安全問題的架構

A mobile agent based architecture to deal with the security problem on enterprise IT-Service outsourcing

黃振瑋(Zhen-Wei Huang)

指導教授 ： 羅濟群

國立交通大學/管理學院/資訊管理研究所/碩士(2014年)

https://doi.org/10.6842/NCTU.2014.00028

摘要

企業中的許多資訊系統與資訊服務，例如ERP系統、郵件系統，伺服器服務等，由於自行開發成本高，時程長，且維護運作需有額外的金錢和人力，因此在導入資訊系統和資訊服務時，會考慮採用外購服務軟體的方式，來節省自行開發的投資。本篇論文著重在，企業將外購系統和服務導入之後，如何快速地處理錯誤，有效率地進行系統維護與管理，同時兼顧企業的網路安全性與資料機密性，這些都是讓系統能有效發揮其預期效益的關鍵。
本篇論文針對此管理問題，提出以行動代理人(Mobile Agent, MA)技術來管理，於安全通道(Secure Tunnel)上，做到錯誤資訊的自動化收集與處理。Mobile agent具備的自主性(Autonomy)和行動性(mobility)，能獨立判斷所接收的資訊，並做出相對應的處置動作，可提高管理上的效率，大幅降低人員的工作量。同時又能在企業原有的網路環境下運作，不需大幅更動企業的網路配置與設定，一樣可以滿足企業對網路安全的要求。

關鍵字

行動代理人 ； 虛擬私人網路 ； 伺服器管理 ； 企業外購

並列摘要

In the enterprises or companies, many information systems and IT-Services, such as ERP system, mail system, and server services, have higher cost and longer development time due to the self-development process. Extra money and labors are needed to maintain these systems. Therefore, enterprise IT-Service outsourcing would be adopted to save the investment of integrating the IT-Service. In this paper, we focus on the issues of maintenance, such as fixing the error more quickly, maintaining the system more efficiently, keeping the network security and the data confidentiality of the enterprise, which are the key points to meet the IT-Service performance expectation.

In this paper, we propose the mobile agent to manage these issues by automatically collecting the error info and error handling through a secure tunnel. The mobile agent, has the attributes of autonomy and mobility, can independently determine the receive information and taking the corresponding actions, that would improve the efficiency of management and reduce the labor burden. Meanwhile, it can be operated on the original enterprise network environment, without changing the network deployment and setting, to meet the need of enterprise network security.

並列關鍵字

Mobile Agent ； VPN ； Server Management ； Enterprise Outsourcing

參考文獻

2. Osei-Bryson, K.-M. and O.K. Ngwenyama, Managing risks in information systems outsourcing: An approach to analyzing outsourcing risks and structuring incentive contracts. European Journal of Operational Research, 2006. 174(1): p. 245-264.

4. Sabherwal, R. and V. Choudhury, Governance of remotely outsourced software development: A comparison of client and vendor perspectives. Information systems outsourcing: Enduring themes, new perspectives, and global challenges, 2006: p. 187-222.

5. Persona, A., et al., Remote control and maintenance outsourcing networks and its applications in supply chain management. Journal of Operations Management, 2007. 25(6): p. 1275-1291.

6. Vieira-Marques, P.M., et al., Secure Integration of Distributed Medical Data Using Mobile Agents. Intelligent Systems, IEEE, 2006. 21(6): p. 47-54.

8. Satoh, I., Building and Selecting Mobile Agents for Network Management Journal of Network and Systems Management, 2006. 14,Number1 p. 147-169.