Security policy online detection system facing to terminal computers

A terminal computer and computer technology, applied in transmission systems, digital transmission systems, electrical components, etc., can solve problems such as high internal complexity, reduced network security defense capabilities, and lengthy management cycles, so as to reduce the requirements for professional technical knowledge and reduce unique Command input, the effect of improving the overall safety performance

CN102647419BActive Publication Date: 2014-08-27BEIJING INST OF SPACECRAFT SYST ENG +1
4 Cites 0 Cited by

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Publication Date
2014-08-27

Smart Images

  • Figure 1
    Figure 1
  • Figure 2
    Figure 2
  • Figure 3
    Figure 3
Patent Text Reader

Abstract

The invention provides a security policy online detection system facing to terminal computers. All the terminal computers are intensively detected on line on a central computer; all the computers are connected through a network; the system comprises an online detection tool, a packaging module and the central computer, wherein the packaging module is used for packaging the online detection tool into a CAB form to be stored on the central computer; the central computer is used for embedding the CAB into an IE (Internet Explorer) browser; the terminal computers download the CAB from the central computer through the IE browser and automatically install the CAB; and the online detection tool comprises a policy defining module, a uniform data interface module, a checking analyzing module, a policy internal ratio module and a display module. The system has the advantages of short development period, good maintainability, flexibility of opening an interface, complete debugging function and easiness for use and management.
Need to check novelty before this filing date? Find Prior Art

Description

technical field

[0001] The invention relates to a terminal computer-oriented strategy, security management and control, and belongs to the technical field of computer security inspection. Background technique

[0002] A large-scale network system usually includes a large number of different network devices, such as gateways, routers, servers and clients that provide services to users and run various applications. Devices, services, applications, servers, clients, and users, and even their relationships are all objects that need to be managed. The internal complexity of this large-scale network system makes management extremely difficult and the management cycle is lengthy, and with the expansion of the system scale, the management overhead also increases exponentially.

[0003] The management of network security policies is an essential part of any network system management. Improper network security configuration may cause some users to have excessive privileges, while oth...

Examples

Embodiment Construction

[0026] The implementation process of the system of the present invention will be described in detail below in conjunction with the accompanying drawings. This system conducts centralized inspection on all terminal computers online on a central computer, and all computers are connected through a network; the system includes an online inspection tool and a packaging module, and the packaging module packs the online inspection tool into a CAB form and Stored on the central computer, the central computer embeds the CAB into the IE browser (can adopt com technology to realize embedding), and the terminal computer downloads the CAB from the central computer through the IE browser and automatically installs it; the online inspection tool includes a policy definition module, Unified data interface module, query analysis module, strategy internal comparison module and display module;

[0027] The system of the present invention can realize two situations of online centralized inspectio...