System and method for achieving safety audit

Abstract

The invention relates to a system for achieving a safety audit. The system comprises a plurality of clients, a plurality of servers and a safety audit device. The invention further relates to a safety audit method. The method includes the steps that service request messages are sent to the safety audit device by the clients; the safety audit device forwards the service request messages to the servers corresponding to the service request messages, and a service request message mirror image is copied so that a corresponding mirror image file can be obtained; the safety audit device analyzes the mirror image file so that corresponding service operation instructions can be obtained; the servers respond to the service request messages and send corresponding service operation logs to the safety audit device; the safety audit device compares and analyzes the service operation instructions and the service operation logs. The system for achieving the safety audit has the functions of double-machine hot standby and cluster deployment, is easy to popularize, stable and reliable, supports dynamic expansion and has a wider application range.

Description

technical field [0001] The present invention relates to the field of information security, in particular to the field of security audit of user access, and specifically refers to a system and method for realizing security audit. Background technique [0002] With the rapid development of information technology, Internet security issues have become increasingly prominent. Traditional network security methods such as firewalls and intrusion detection can realize the management and monitoring of abnormal network behaviors, but cannot monitor network content and authorized normal internal network access behaviors. Therefore, information leakage and network resource monitoring caused by normal network access behaviors Behavior can't be helped. Under this background, a security audit device is produced. The network topology diagram of the existing security audit device is as follows: figure 1 As shown, the security audit device corresponds to the server one by one. However, at ...

AI Technical Summary

Problems solved by technology

However, at present, various industries rely heavily on information systems and need to provide uninterrupted services to ensure 24-hour uninterrupted operation. This also requires security audit equipment to provide continuous and reliable services. figure 1 The method shown in is difficult to meet this requirement; in real applications, the number of application servers is relatively large and increasing day by day, usually a security audit device cannot support a large number of servers, which requires the security audit device to support dynamic expansion

Images