传统的安全管理框架缺少对底层数据的整合分析,不能形成有效的网络安全态势信息和风险评估,也不能满足用户对其扩展性和健壮性的要求。文中利用TMN(电信管理网)管理与受管资源分开的思路启发,提出了一种新的综合安全管理框架。新的框架在J2EE分布式架构平台加以实现,能够满足用户对综合安管系统扩展性、易用性和健壮性的需求。 The traditional security management framework lacks the integrated analysis of the underlying data, can not form effective information and risk assessment of network security situation, and can not meet users’ requirements for its scalability and robustness. In this paper, TMN (Telecom Management Network) management and managed resources inspired by the idea of ​​separation, put forward a new integrated security management framework. The new framework is implemented on the J2EE distributed architecture platform to meet the needs of users for scalability, ease of use and robustness of integrated security management systems.