Character operating command identification method and device

Abstract

The invention discloses a character operating command identification method and device. The character operating command identification method comprises the following steps of: acquiring interactive data between a target client and a target server; simulating output content according to the interactive data, wherein the output content comprises content and a client state for displaying the interactive data, and the client state comprises a cursor position in the interactive data; and identifying the interactive data in the output content in the same row as the cursor position to be a character operating command. Since command identification is not performed according to a command prompt of character operation any longer in the embodiment, misjudgment is not caused by change of the command prompt like the prior art; since the cursor position is available during input of the character operating command by a user, identification omission of the character operating command can be effectively avoided through the technical scheme in the embodiment of the invention; and therefore, the identification rate of the character operating command is effectively increased.

Description

Technical field [0001] The invention relates to the field of safe access, in particular to a method and device for identifying character operation commands. Background technique [0002] Character remote access is the most commonly used remote access method for Linux, Unix, or network devices. It allows users to remotely operate a computer, execute commands on it, and perform maintenance. Currently, the main methods of character remote access include SSH and Telnet. [0003] Character remote access brings great convenience to remote office and remote maintenance, but it also brings a series of security issues. Remote operations performed by SSH and Telnet may bring resource information leakage and illegal operations. Therefore, effective mechanisms must be adopted to monitor and audit character remote operations, especially those critical servers and critical data operations. To ensure safe supervision and auditing. [0004] The core of the remote character operation audit lies in...

AI Technical Summary

Problems solved by technology

[0006] Due to the variety of manufacturers and models of Linux / UNIX and network equipment, the command prompts used are different, and the built-in command prompts of the system are difficult to fully cover, so when the technical scheme in the prior art audits the core of the character remote operation audit , if the user changes the command prompt, or the device adopts an unconventional command prompt, the command recognition cannot be performed, resulting in misjudgment

[0007] To sum up, in the prior art, the technical scheme of character operation command recognition based on the command prompt has a low recognition rate of character operation commands, which may easily cause misjudgment of character operation commands, thereby affecting the accuracy of audit results

Images