Security policy online detection system facing to terminal computers

Abstract

The invention provides a security policy online detection system facing to terminal computers. All the terminal computers are intensively detected on line on a central computer; all the computers are connected through a network; the system comprises an online detection tool, a packaging module and the central computer, wherein the packaging module is used for packaging the online detection tool into a CAB form to be stored on the central computer; the central computer is used for embedding the CAB into an IE (Internet Explorer) browser; the terminal computers download the CAB from the central computer through the IE browser and automatically install the CAB; and the online detection tool comprises a policy defining module, a uniform data interface module, a checking analyzing module, a policy internal ratio module and a display module. The system has the advantages of short development period, good maintainability, flexibility of opening an interface, complete debugging function and easiness for use and management.

Description

technical field [0001] The invention relates to a terminal computer-oriented strategy, security management and control, and belongs to the technical field of computer security inspection. Background technique [0002] A large-scale network system usually includes a large number of different network devices, such as gateways, routers, servers and clients that provide services to users and run various applications. Devices, services, applications, servers, clients, and users, and even their relationships are all objects that need to be managed. The internal complexity of this large-scale network system makes management extremely difficult and the management cycle is lengthy, and with the expansion of the system scale, the management overhead also increases exponentially. [0003] The management of network security policies is an essential part of any network system management. Improper network security configuration may cause some users to have excessive privileges, while oth...

AI Technical Summary

Problems solved by technology

The internal complexity of this large-scale network system makes management extremely difficult and the management cycle is lengthy, and with the expansion of the system scale, the management overhead also increases exponentially

[0003] The management of network security policies is an essential part of any network system management. Improper network security configuration may cause some users to have excessive privileges, while other users who need high privileges may not be able to obtain corresponding privileges. permissions, resulting in improper permission configuration; on the other hand, it may also bring a very large security risk to the network and reduce the security defense capability of the entire network

[0004] At present, the general operation is to use various functions provided by the computer to set and obtain these policies, but these functions are scattered, and the settings are not sufficient, and many important functions required by users cannot be achieved.

For the existing functions, users need certain computer expertise to use them, and the settings are cumbersome, which is not conducive to the user's operation

Images