A security detection method and system based on a centralized management host

Abstract

The embodiment of the present invention provides a method and system for security detection of a host based on centralized management, which are used to improve the efficiency of security detection of a host based on centralized management. The method in the embodiment of the present invention includes: the clients deployed on multiple hosts of different users respectively collect the log information of the corresponding hosts and upload them to the cloud platform, the cloud platform is deployed in the public network, and each host that needs security detection One client is installed; the cloud platform forwards the log information to the security management platform to which the user corresponding to the log information belongs, and the cloud platform includes at least one security management platform; the security management The platform respectively parses the log information, generates security threat information according to the log information, and displays it to the user.

Description

technical field [0001] The invention relates to the field of network security, in particular to a security detection method and system based on a centrally managed host. Background technique [0002] The vigorous development of the Internet has brought all walks of life into the information network era. There are various online services, and the number of people enjoying the services is huge. The number of server hosts in the company is also increasing. At the same time, the threat of attacks on the hosts is also increasing. Host management is becoming more and more challenging, and traditional host security maintenance is no longer applicable to existing big data centers. [0003] The current situation of multi-host data center management, the specific problems are as follows: the traditional host security defense method is to deploy anti-virus software to scan for vulnerabilities on a single host. Real-time processing of security incidents cannot be performed, and users a...

AI Technical Summary

Problems solved by technology

[0003] The current situation of multi-host data center management, the specific problems are as follows: the traditional host security defense method is to deploy anti-virus software to scan for vulnerabilities on a single host. Real-time processing of security incidents cannot be performed, and users are required to regularly extract the report files generated by each host antivirus software one by one to evaluate the security status of a single host and analyze whether there are security threats to the host

Users regularly check and analyze the security of hosts one by one, the process is cumbersome and inefficient, and it is difficult for users to analyze the security status of the entire data center by analyzing a single host

[0004] Therefore, it is necessary to develop a security detection method based on a centralized management host to solve the above-mentioned problem of low detection efficiency based on a centralized management host

Images