Host security detection method and system based on central management

Abstract

The embodiment of the invention provides a host security detection method and system based on central management, and the method and system are used for improving the efficiency of host security detection based on central management. The method comprises the steps: clients in multiple hosts of different users separately acquire log information of corresponding hosts and upload to a cloud platform, the cloud platform is arranged in public network, and one client is arranged on each to-be-security detected host; the cloud platform separately forwards the log information security management platforms which users corresponding to the log information belong, and the cloud platform comprises at least one security management platform; and the security management platforms separately analyze the log information and generate security threat information according to the log information and display to the users.

Description

technical field [0001] The invention relates to the field of network security, in particular to a security detection method and system based on a centrally managed host. Background technique [0002] The vigorous development of the Internet has brought all walks of life into the information network era. There are various online services, and the number of people enjoying the services is huge. The number of server hosts in the company is also increasing. At the same time, the threat of attacks on the hosts is also increasing. Host management is becoming more and more challenging, and traditional host security maintenance is no longer applicable to existing big data centers. [0003] The current situation of multi-host data center management, the specific problems are as follows: the traditional host security defense method is to deploy anti-virus software to scan for vulnerabilities on a single host. Real-time processing of security incidents cannot be performed, and users a...

AI Technical Summary

Problems solved by technology

[0003] The current situation of multi-host data center management, the specific problems are as follows: the traditional host security defense method is to deploy anti-virus software to scan for vulnerabilities on a single host. Real-time processing of security incidents cannot be performed, and users are required to regularly extract the report files generated by each host antivirus software one by one to evaluate the security status of a single host and analyze whether there are security threats to the host

Users regularly check and analyze the security of hosts one by one, the process is cumbersome and inefficient, and it is difficult for users to analyze the security status of the entire data center by analyzing a single host

[0004] Therefore, it is necessary to develop a security detection method based on a centralized management host to solve the above-mentioned problem of low detection efficiency based on a centralized management host

Images