Ti liu c t yu cu phn mm v1.0CNG TY C PHN U T PHT TRIN CNG NGH IN T - VIN THNGC T YU CU PHN MM v1.0Ngi lp: .................................................Ngy lp: .................................................Ngi xem xt: .................................................Ngy lp: /./....................Ngi duyt: .................................................Ngy duyt: /./....................D khch hng duyt:.........................................Ngy duyt: /./....................L[CH S THAY I TI LIU09.BM.QTPM. EJC, (v2.0) Trang 1/55Ti liu c t yu cu phn mm v1.0Ngy thay di Phin bn M t Tc gi/Nhm tc gi09.BM.QTPM. EJC, (v2.0) Trang 2/55Ti liu c t yu cu phn mm v1.0MUC LUC1. GII THIU CHUNG1.1 Muc dch1.2 Pham vi1.3 Cc djnh ngha, thut ng, t vit tt1.4 Ti liu tham kho2. M T TNG QUAN H THNG2.1 Danh sch cc tc nhn v m t2.2 M hnh use case3. C T CC YU CU CHC NNG (FUNCTIONAL)3.1 Khi chc nng Mediation3.1.1 ng b d Iiu Postgres3.1.1.1 UC_POSTGRES_001 Chc nng dng b bng qidmap 73.1.1.2 UC_POSTGRES_002 Chc nng dng b bng category_map 93.1.1.3 UC_POSTGRES_003 Chc nng dng b bng sensordevice 103.1.2 ng b d Iiu ArieI3.1.2.1 UC_AREL_001 ng b d liu Event 113.1.2.2 UC_AREL_ ng b d liu Flow 123.2 Khi chc nng mn hnh chi huy3.2.1 UC_CH_001 Gim st theo khng gian mang3.2.2 UC_CH_002 Gim st theo s kin mang3.2.3 UC_CH_003 Gim st theo topo mang3.2.4 UC_CH_004 Danh sch s kin3.2.5 UC_CH_005 Gim st k hoach3.2.6 UC_CH_006 Gim st cnh bo3.3 Khi chc nng gim st h thng3.3.1 Khng gian mang3.3.1.1 UC_GH_001 Hin thj thit bj mang 143.3.1.2 UC_GH_002 Hin thj kt ni mang 143.3.1.3 UC_GH_003 Gim st theo topo mang 1409.BM.QTPM. EJC, (v2.0) Trang 3/55Ti liu c t yu cu phn mm v1.03.3.1.4 UC_GH_004 Loc theo don vj 143.3.1.5 UC_GH_005 Hin thj danh sch cnh bo an ninh 143.3.1.6 UC_GH_006 Phng to thu nh bn d 143.3.2 Gim st s kin mang3.3.2.1 UC_GH_007 Hin thj tia mang 143.3.2.2 UC_GH_008 Loc theo server 143.3.2.3 UC_GH_009 Gim st theo topo mang 143.3.2.4 UC_GH_010 Danh sch su kin 143.3.2.5 UC_GH_011 Loc theo djch vu 143.3.3 Topo mang Iui3.3.3.1 UC_GH_012 V topo mang 143.3.3.2 UC_GH_013 Thng tin thit bj 143.3.3.3 UC_GH_014 Hin thj cnh bo 143.4 Khi chc nng qun l su kin3.4.1.1 UC_EVM_001 Danh sch su kin 143.4.1.2 UC_EVM_002 Thng k top ip ngun 163.4.1.3 UC_EVM_003 Thng k top ip dch 173.4.1.4 UC_EVM_004 Thng k loai su kin 183.4.1.5 UC_EVM_005 Thng k ngng 193.4.1.6 UC_EVM_006 Thng k theo mc d nguy him 213.4.1.7 UC_EVM_007 iu tra 223.4.1.8 UC_EVM_008 Xem thng tin chi tit su kin 233.5 Khi chc nng qun l vt t3.6 Khi chc nng qun l cn b3.7 Khi chc nng qun l k hoach3.8 Khi chc nng qun trj h thng3.8.1 Qun I ngui dng3.8.1.1 UC_ST_001 Tm kim ngi dng 253.8.1.2 UC_ST_002 Danh sch ngi dng 273.8.1.3 UC_ST_003 Thm mi ngi dng 283.8.1.4 UC_ST _004 Xem chi tit ngi dng 303.8.1.5 UC_ST_005 Sa thng tin ngi dng 313.8.1.6 UC_ST_006 Xa ngi dng 3309.BM.QTPM. EJC, (v2.0) Trang 4/55Ti liu c t yu cu phn mm v1.03.8.2 Qun I cu hnh3.8.2.1 UC_ST_007 Cu hnh Mediation 343.8.2.2 UC_ST_008 Cu hnh SEM 353.8.2.3 UC_ST_008 Cu hnh SEM 363.8.2.4 UC_ST_009 Cu hnh cnh bo 373.8.2.5 UC_ST_009 Cu hnh cnh bo 373.8.2.6 UC_ST_010 Cu hnh LogSource 383.8.2.7 UC_ST_010 Cu hnh LogSource 383.8.3 Qun I quyn3.8.3.1 UC_ST_011 Cu hnh quyn 393.8.3.2 UC_ST_011 Cu hnh quyn 403.9 Khi chc nng bo co an ninh3.9.1 Cnh bo s kin3.9.1.1 UC_WN_001 Cnh bo su kin 413.9.1.2 UC_ST_011 Cu hnh quyn 413.9.2 Cnh bo thit b[3.9.2.1 UC_WN_002 Cnh bo thit bj 423.9.2.2 UC_ST_011 Cu hnh quyn 423.9.3 Cnh bo k hoach3.9.3.1 UC_WN_003 Cnh bo k hoach 433.9.3.2 UC_ST_011 Cu hnh quyn 4309.BM.QTPM. EJC, (v2.0) Trang 5/55Ti liu c t yu cu phn mm v1.01. GII THIU CHUNG1.1 Mc dch 1.2 Pham vi1.3 Cc d[nh ngha, thut ng, t vit ttSTT Thut ng, t vit tt Gii thich Ghi ch1.4 Ti Iiu tham khoSTT Tn ti Iiu Ghi ch09.BM.QTPM. EJC, (v2.0) Trang 6/55Ti liu c t yu cu phn mm v1.02. M T TNG QUAN H THNG2.1 Danh sch cc tc nhn v m tTc nhn M t tc nhn Ghi ch2.2 M hnh use case3. C T CC YU CU CHC NNG (FUNCTIONAL)3.1 Khi chc nng Mediation3.1.1 ng b d Iiu Postgres3.1.1.1 UC_POSTGRES_001 Chc nng ng b bng qidmapa. Biu d09.BM.QTPM. EJC, (v2.0) Trang 7/55Ti liu c t yu cu phn mm v1.0b. Use caseUse case:UC_MED_001 ng b bng qidmapMc dch: ng b d liu bng qidmap t h thng SEM v h thng ELCOMM t: Khi c mt thay di trong bng qidmap trn h thng SEM (insert, delete,update), h thng s tu dng b thay di d sang h thng ELCOM Tc nhn:iu kin truc: H thng khi tao checkDataLungskinchnh(Basic fIows)1. Thay di trong bng Postgres.qidmap2. H thng tu dng lu thay di vo bng changeLog3.H thng check thay di trong bng changeLog4. Cp nht thay di vo bng Oracle.qidmapLung s kin ph(AIternative FIows):3.1 Thi gian check thay di l 3s ti 5s mt ln4.1 H thng update bn ghi thay di trong changeLogiu kin sau:09.BM.QTPM. EJC, (v2.0) Trang 8/55Ti liu c t yu cu phn mm v1.03.1.1.2 UC_POSTGRES_002 Chc nng ng b bng ca!g"#$_mapa. Biu db. Usecase Use case:UC_MED_001 ng b bng category_typeMc dch: ng b d liu bng category_type t h thng SEM v h thng ELCOMM t: Khi c mt thay di trong bng category_type trn h thng SEM (insert,delete, update), h thng s tu dng b thay di d sang h thng ELCOM Tc nhn:iu kin truc: H thng khi tao checkDataLungskinchnh(Basic fIows)5. Thay di trong bng Postgres. category_type6. H thng tu dng lu thay di vo bng changeLog7.H thng check thay di trong bng changeLog8. Cp nht thay di vo bng Oracle. category_typeLung s kin ph(AIternative FIows):3.1 Thi gian check thay di l 3s ti 5s mt ln4.1 H thng update bn ghi thay di trong changeLog09.BM.QTPM. EJC, (v2.0) Trang 9/55Ti liu c t yu cu phn mm v1.0iu kin sau:3.1.1.3 UC_POSTGRES_00% Chc nng ng b bng &!n&"#d!'ic!a. Biu db. UsecaseUse case:UC_MED_001 ng b bng sensordeviceMc dch: ng b d liu bng sensordevice t h thng SEM v h thng ELCOMM t: Khic mt thay ditrong bng sensordevice trn h thng SEM (insert,delete), h thng s tu dng b thay di d sang h thng ELCOM Tc nhn:iu kin truc: H thng khi tao checkDataLungskinchnh(Basic fIows)9. Thay di trong bng Postgres. sensordevice10. H thng tu dng lu thay di vo bng changeLog11. H thng check thay di trong bng changeLog12. Cp nht thay di vo bng Oracle. sensordevice09.BM.QTPM. EJC, (v2.0) Trang 10/55Ti liu c t yu cu phn mm v1.0Lung s kin ph(AIternative FIows):3.1 Thi gian check thay di l 3s ti 5s mt ln4.1 H thng update bn ghi thay di trong changeLogiu kin sau:3.1.2 ng b d Iiu ArieI3.1.2.1 UC_(R)E*_001 +ng b d, -i./ E'!na. Biu db. UsecaseUse case:UC_MED_001 ng b d liu eventMc dch: ng b d liu event t h thng SEM sang h thng ELCOMM t: H thng elcom gi request check event djnh ky sang h thng SEM, saud lu tr thng tin event, phuc vu cc cng vic tra cu Tc nhn:iu kin truc: H thng khi tao check eventLungskinchnh(Basic fIows)1. H thng gi requestCheckEvent() sang SEM AP2. H thng SEM AP gi query checkEvent trong db Ariel09.BM.QTPM. EJC, (v2.0) Trang 11/55Ti liu c t yu cu phn mm v1.03. DB Ariel gi kt qu Event cho SEM AP4. SEM AP forward data cho Mediation Processor5. Mediation Processor lu d liu event vo bng event trong OracleLung s kin ph(AIternative FIows):1.1 Thi gian check thay di l 3s ti 5s mt lniu kin sau:3.1.2.2 UC_(R)E*_ +ng b d, -i./ 0-"1a. Biu db. UsecaseUse case:UC_MED_001 ng b d liu flowMc dch: ng b d liu flow t h thng SEM sang h thng ELCOMM t: H thng elcom gi request check flow djnh ky sang h thng SEM, sau dlu tr thng tin flow, phuc vu cc cng vic tra cu Tc nhn:iu kin truc: H thng khi tao check flowLungskinchnh 1. H thng gi requestCheckFlow() sang SEM AP09.BM.QTPM. EJC, (v2.0) Trang 12/55Ti liu c t yu cu phn mm v1.0(Basic fIows) 2. H thng SEM AP gi query checkFlow trong db Ariel3. DB Ariel gi kt qu Flow cho SEM AP4. SEM AP forward data cho Mediation Processor5. Mediation Processor lu d liu flow vo bng flow trong OracleLung s kin ph(AIternative FIows):1.1 Thi gian check thay di l 3s ti 5s mt lniu kin sau:Lu : Trong h thng SEM Qradar, cc d liu log chi doc ly vi khong thi gian ti thiu l 1pht startTime ti endEnd l 1 pht. D liu end Time mun nht l sysdate 1 pht. Do d d liu realtime s doc ly theo range sau : (startTime, endTime) = (sysdate 2 minutes,sysdate 1 minute).3.2 Khi chc nng mn hnh chi huy3.2.1 UC_CH_001 Gim st theo khng gian mangTham chiu chc nng Khng gian mang (3.3.1)3.2.2 UC_CH_002 Gim st theo s kin mangTham chiu chc nng Gim st su kin mang (3.2.2)3.2.3 UC_CH_003 Gim st theo topo mangTham chiu chc nng Topo mang li (3.2.3)3.2.4 UC_CH_004 Danh sch s kinTham chiu chc nng UC_EVM_001 Danh sch su kin (3.4.1.1)3.2.5 UC_CH_005 Gim st k hoachTham chiu chc nng Khi chc nng qun l k hoach (3.7)3.2.6 UC_CH_006 Gim st cnh boTham chiu chc nng Khi chc nng bo co an ninh (3.9)09.BM.QTPM. EJC, (v2.0) Trang 13/55Ti liu c t yu cu phn mm v1.03.3 Khi chc nng gim st h thng3.3.1 Khng gian mang3.3.1.1 UC_G2_001 2i3n h4 hi5 b4 m6ng3.3.1.2 UC_G2_002 2i3n h4 75 n8i m6ng3.3.1.3 UC_G2_00% Gi9m &9 h!" "p" m6ng3.3.1.4 UC_G2_00: *;c h!"