Data protection method and safety bastion host

Abstract

The invention provides a data protection method and a safety bastion host which is connected in series to a path between a client terminal and a server. The method comprises the following steps: acquiring a plurality of data of a server; determining the importance level of each datum, and setting up no operation privilege of a system administrator to data with higher importance level than the set threshold; determining the importance level of data operated by a first operation instruction sent by the system administrator when the first operation instruction is received; and preventing the first operation instruction from access to the data operated by the first operation instruction when the importance level of the data operated by the first operation instruction is higher than the set threshold. According to the scheme, attacking server data by a hacker through acquiring the privilege of the system administrator is avoided through setting no operation privilege of the system administrator to the data with higher importance level than the set threshold, thereby improving the safety performance of the server data.

Description

technical field [0001] The invention relates to the field of communication technology, in particular to a data protection method and a bastion machine. Background technique [0002] With the rapid development of communication technology, server data security is particularly important. The traditional data protection method can use the bastion machine to ensure the data security of the server. Among them, the bastion host is an operation and maintenance audit product for data centers, which can provide functions such as single sign-on, account management, authorization management, and security audit. [0003] In the prior art, the bastion machine is used to ensure the data security of the server. By connecting the bastion machine in series between the client and the server, the system administrator on the client side obtains the data in the server and stores the data in the server in the bastion In the machine, when receiving the access instruction sent by the client, it is...

AI Technical Summary

Problems solved by technology

[0004] However, if the bastion machine is attacked by hackers, the hacker obtains the authority of the system administrator and uses the highest authority of the system administrator in the bastion machine to access and modify the data of the server, so the security of the server data cannot be guaranteed.

Images