A method and device for synchronizing security baseline items

Abstract

The invention provides a synchronizing method and device for a safety baseline project. The method includes: acquiring a source knowledge base comprising at least one source project; aiming at each target project in a to-be-synchronized knowledge base, judging whether the source knowledge base comprises first source projects with source identification identical with that of the target projects or not; if so, using the first source projects to replace the target projects in the to-be-synchronized knowledge base; if not, standardizing the project names of the target projects to obtain standardized project names, and judging whether the source knowledge base comprises second source projects corresponding to the standardized project names and with project types identical with those of the target projects or not; if so, using the second source projects to replace the target projects in the to-be-synchronized knowledge base. By the method, the labor intensity for customizing a safety baseline knowledge base can be lowered.

Description

technical field [0001] The invention relates to the field of computer technology, in particular to a method and device for synchronizing security baseline items. Background technique [0002] A security baseline is a detailed description of how to configure and manage computers in the computer security system, which can implement trusted computer components on a computer, and is also used to describe related configurations to achieve safe operation. Security baselines exist in the form of knowledge bases, and a knowledge base usually includes multiple items. When constructing the knowledge base of the security baseline, it is usually necessary to customize the officially provided knowledge base according to business needs. Since different operating systems have their own corresponding security baseline knowledge bases, different security baseline knowledge bases usually include multiple items of the same origin. [0003] At present, when customizing the knowledge base of t...

AI Technical Summary

Problems solved by technology

[0004] For the current method of customizing the security baseline knowledge base, it is necessary to customize the security baseline knowledge bases corresponding to various operating systems, and the security baseline knowledge bases corresponding to different operating systems include a large number of homologous projects, which need to be repeated. Manual customization of these homologous projects leads to high labor intensity in customizing the security baseline knowledge base

Images