The application discloses a kind of real-time behavior supervision systems of secret-related terminal based on multi-factor identity
authentication, and relates to the field of
information security technology.The real-time behavior supervision systems of secret-related terminal based on multi-factor identity
authentication, including identity
authentication unit, terminal probe unit,
attack and theft of secrets
traceability analysis unit and behavior supervision
correlation analysis unit, the
system is through collecting terminal identity, environment, process and
network connection log, and with network side
attack alarm space-
time correlation analysis, can when discovering
network attack behavior, quickly locate to specific secret-related terminal and its operation user, and
correlation analysis attack occurs before terminal physical environment state, generate high-risk event alarm of fusion multi-party evidence, the present application is through the multi-factor authentication of secret-related terminal, real-time
behavior monitoring and
network attack detection depth correlation, solved the difficult problem of terminal security and
network security data split, realized from
network attack alarm to specific person in charge and the accurate
traceability of on-site environment evidence.