Operation and maintenance safety auditing method and system

Abstract

The invention discloses an operation and maintenance safety auditing method. The operation and maintenance safety auditing method comprises the following steps: receiving a login request sent by operation and maintenance personnel, and verifying the login request; if the verification is passed, obtaining and storing face image information of the operation and maintenance personnel in real time, and meanwhile recording an operation and maintenance operation on operation and maintenance target equipment in real time; verifying the identity of the operation and maintenance personnel in real time according to the face image information, and judging whether the operation and maintenance operation is an illegal operation; if the verification of the identity of the operation and maintenance personnel is wrong, and / or the operation and maintenance operation is the illegal operation, sending an alarm signal and / or interrupting the operation and maintenance operation; and carrying out correlation analysis on the face image information and the operation and maintenance operation, forming an operation and maintenance link, and carrying out audit according to the operation and maintenance link. Identity authentication can be carried out on the identity of the IT operation and maintenance personnel in an operation and maintenance personnel process, and the illegal operation and maintenance operation can be found in time. The invention further discloses an operation and maintenance safety auditing system.

Description

technical field [0001] The present invention relates to the technical field of operation and maintenance security, and more specifically, relates to an operation and maintenance security audit method, and also relates to an operation and maintenance security audit system. Background technique [0002] IT system operation and maintenance means that IT operation and maintenance personnel maintain and repair the IT operating environment such as software environment and network environment. Operation and maintenance security is the cornerstone of enterprise security, especially for Internet companies. It is different from web security, mobile security or business security. Because operation and maintenance security is at the bottom, or involves servers, network equipment, and basic applications, once a security problem occurs, it will directly threaten the security of the server and seriously affect the company's core business. [0003] At present, in the prior art, the identifi...

AI Technical Summary

Problems solved by technology

However, due to leaked account passwords, lost mobile phones, or the inability to perform face recognition, identification cannot be performed before operation and maintenance, and IT operation and maintenance personnel cannot be identified before operation and maintenance during or after operation and maintenance, resulting in inability to Identification of the true identity of IT operation and maintenance personnel

[0004] In addition, during the operation and maintenance process, improper operation and maintenance operations will leave potential security threats. Due to the lack of management and operation and maintenance process records, the responsible person cannot be designated to conduct audits in a timely manner, resulting in system problems that cannot be traced to the source in time and cannot be timely exclude

Images