Security configuration checking system

Abstract

The invention discloses a security configuration checking system. In a remote checking process, an access mode of target equipment, a login user name and a login password need to be output; remote check can be achieved only when a check target and a tool can be reached by an IP and the check target opens related service and ports; for the remote check, a plurality of sets of equipment can be simultaneously checked through the appointed concurrent access quantity; for the remote check which the IP cannot reach directly, property information and login information of skip intermediate equipment can be set through some intermediate equipment such as bastion host skip and through a skip table function; target equipment is accessed after skip; when a dynamic password is needed, corresponding intermediate equipment or the bastion host can be mutually logged in to form activity conversation through a share conversation function, a system can be connected to the intermediate equipment or the bastion host through the conversation to access the target equipment to collect security configuration to perform security configuration base line check, and finally a configuration check result is output.

Description

technical field [0001] The invention relates to the technical field of verification systems, in particular to a safety configuration verification system. Background technique [0002] Based on the benchmark security standard system that combines research and business security, a baseline security model for business systems is formed with reference to domestic and foreign standards, norms, and mature experience. Among these reference contents, the most worthwhile reference is the FDCC project (Federal Desktop Core Configuration, Federal Desktop Core Configuration Program) based on SCAP (Security Content Automation Protocol). [0003] FDCC's goal is to deploy a standard desktop operating system with integrated security configurations on more than 450,000 federal government computers to reduce security holes and illegal configurations in millions of federal computers while reducing acquisition and operating costs. This project was first carried out within the US Air Force. The...

AI Technical Summary

Problems solved by technology

There are also many SCAP-related projects in the open source field, among which OpenSCAP, OVALDi and eSCAPe are more important. These projects form a complete development and utilization system for SCAP. eSCAPe is used to generate SCAPContent, while OpenSCAP, OVALDi is used to perform SCAP-based scans, but lacks a verification system

Images