Inspection method and equipment for security baseline
A security baseline and baseline technology, applied in the communication field, can solve problems such as security risks and configurations that do not meet security requirements, and achieve the effect of eliminating security risks
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
Method used
Image
Examples
Embodiment 1
[0025] An embodiment of the present invention provides a security baseline verification method, such as figure 2 As shown, wherein, the checked device is a device with SNMP (Simple Network Management Protocol, Simple Network Management Protocol) function, and the method may include:
[0026] Step 101, receiving the SNMP message sent by the checked device.
[0027] Step 102. Obtain a configuration change SNMP message carrying changed configuration parameters from the SNMP message; the configuration change SNMP message is sent when the configuration of the checked device is changed.
[0028] Step 103: If the changed configuration parameter carried in the configuration change SNMP message exceeds the security requirement range of the stored baseline check template, it is determined that the changed configuration parameter does not meet the security requirement.
[0029] The scope of the security requirements of the baseline verification template includes the security requiremen...
Embodiment 2
[0037] Another embodiment of the present invention provides a method for checking a security baseline, which is applied to a security baseline checking device ( Figure 3-b ), compared to the existing security baseline verification equipment ( Figure 3-a ) includes a system management module, a task configuration module, a template management module, a log module, a database module and a check module, and also includes a configuration change monitoring module, a message audit filter module, a comparison module, a version control module and a user configuration module, wherein the present invention adds The module will continue to be introduced later, the embodiment of the present invention is used to check the A device,
[0038] Such as Figure 4 As shown, the method may include:
[0039] Step 201. When starting up, the version control module stores the baseline check template, and executes step 202.
[0040] The baseline verification template is a current version control ...
Embodiment 3
[0064] An embodiment of the present invention provides a security baseline checking device 30, such as Figure 5 As shown, can include:
[0065] The configuration change monitoring module 301 is configured to receive the SNMP message sent by the checked device.
[0066] The message audit filtering module 302 is configured to obtain a configuration change SNMP message carrying changed configuration parameters from the SNMP message; the configuration change SNMP message is sent when the configuration of the checked device is changed.
[0067] The comparison module 303 is configured to determine that the changed configuration parameters do not meet the safety requirements if the changed configuration parameters carried in the configuration change SNMP message exceed the security requirement range of the stored baseline check template.
[0068] In this way, as long as the configuration is changed, the configuration parameter SNMP message carrying the changed configuration paramet...
PUM
Login to View More Abstract
Description
Claims
Application Information
Login to View More 