UNIX host safety configuration auditing method based on configurable knowledge base

Abstract

The invention discloses a UNIX host safety configuration auditing method based on a configurable knowledge base. In the method provided by the invention, the knowledge base comprises a system configuration rule base for safety auditing and a safety reinforcing suggestion base capable of providing safety decision support for a user and flexibly customizing the knowledge base aiming at different UNIX operating system types and safety auditing requirements. According to the invention, the method can be used for screening auditing items provided by the knowledge base according to filtration conditions such as UNIX operating system types, auditing requirements and the like, implementing automatic configuration auditing, bug analysis, risk rating and reinforcing implementation risk analysis of a UNIX host system and forming a report. The method is beneficial to the timely discovery of potential safety hazards of the host system and final achievement of the safety protection of the UNIX host system.

Description

technical field [0001] The invention relates to a security assessment method in the technical field of information security, and is mainly used for solving the security configuration auditing problem of a UNIX host system. Background technique [0002] With the rapid development of information systems, the security of information systems, especially the security of host operating systems used by information systems, has become an important issue in the safe operation, maintenance and security management of information systems. Due to its good portability, operability, and strong network and database support functions, the UNIX operating system has become the first choice for enterprise large-scale business systems to build workstation platforms and operating platforms. Therefore, the security control and defense of UNIX host systems are directly It is related to the safe and stable operation of the information system, and the timely security audit of the UNIX host system is ...

AI Technical Summary

Problems solved by technology

[0004] The UNIX host system differs from Windows in its code operation mode of visual operation, and it is difficult for operation and maintenance personnel who lack relevant operation skills to conduct comprehensive security monitoring on the UNIX host system

At present, there is still a lack of general-purpose security detection tools supporting UNIX-like operating systems such as UNIX or Linux in China, which cannot effectively detect the vulnerability of the system, resulting in attacks such as password cracking, illegal connection, and file tampering of the UNIX operating system, which may cause enterprises Sensitive information leakage, information system damage and other major security incidents

Images