Method and system for auditing screen record based on WEB proxy

Abstract

The invention provides a method and a system for auditing screen record based on WEB proxy. According to the method, a client acquires RDP (remote desktop protocol) connecting information through a browser and establishes connection with the RDP proxy module, the RDP proxy module deploys a running end of the browser to a front-end processor and deploys a display and operation end on the client by transmitting and storing graphical interface data between the front-end processor and the client, the browser of the front-end processor accesses a target WEB server, a WEB proxy server is communicated with the target WEB server, the WEB proxy server transmits and stores http data between the front-end processor and the target WEB server, and the graphical interface data stored by the RDP proxy module are associated with the http data stored by a WEB proxy server module by an auditing module, so that screen record is audited. The screen record can be conveniently, more accurately and safely audited by the aid of a URL (uniform resource locator) log.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a method and system for performing screen recording and auditing based on a WEB agent. Background technique [0002] WEB proxy refers to the deployment of a WEB proxy server between the user browser (client) and the target website (target WEB server), which is used to forward the client browser to the target WEB server and the target WEB server to the client browser. between requests and responses. In the WEB proxy server, various functions can be realized, such as authority control, auditing of the accessed target WEB server files, and the like. [0003] In the traditional WEB audit method, the WEB proxy server address is set in the client browser. When the client browser accesses the target WEB server, the request sent will first reach the WEB proxy server, and the WEB proxy server will forward the client's request. In the WEB proxy server, the URL information of the...

AI Technical Summary

Problems solved by technology

[0011] 1) The front-end processor of the bastion machine is used as the running end of the browser, and the user's PC is used as the display end of the browser. However, when the user uses a PC, the running end and the display end of the browser are both on the user's PC. The screen audit function needs to manually configure the IP of the bastion machine and the port monitored by the RDP proxy module to establish a connection with the RDP proxy, and many users do not know this information, so ordinary users generally cannot realize the screen recording audit function through a PC;

[0012] 2) The front-end processor in the bastion host communicates directly with the target web server without going through the web proxy server. Therefore, the URL log cannot be obtained while the screen recording audit log is obtained. When viewing the screen recording audit log, Since there is no URL log, auditing is very time-consuming, and it is necessary to read the screen recording log from the beginning. If multiple people operate the target WEB server at the same time, the screen recording log corresponding to each target WEB server needs to be viewed, and it is impossible to combine the two logs. Combined for more precise security auditing and accountability

Images