A method and system for automate verification of remote system security rules

Abstract

The invention provides a remote system safety rule automatic verification method and system, comprising: S1, remotely login operating system, obtaining operating system type; S2, according to the typeof the operating system and the defense level of the current operating system, filtering the rules in the security rule base; S3, connecting the operating system remotely to obtain the type of the protection path; S4, according to different protection path types, setting corresponding authority verification methods; S5, reading the authorization value corresponding to the protection rule path, comparing the protection result with the actual protection result of the rule path, and if the protection error occurs, adding 1 to the error value; S6, continuously verifying until all the rules are verified, if the error value is 0, determining that all the protection rules are verified, otherwise, returning the number of the protection failure safety rules and the specific rule information. The invention realizes automatic obtaining of defense rules according to the operating system and the defense level, and testing of the defense rules, thereby realizing automatic verification of the security rules.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a remote system security rule automatic verification method and system. Background technique [0002] With the development of information technology, Web services have become an important carrier of the Internet industry, and the current hidden dangers of Web security are also emerging one after another. How to protect Web services from attacks has become a hot research topic in the security field. Traditional network security equipment such as firewall (Firewall), intrusion detection system (Intrusion Detection System, IDS), intrusion prevention system (Intrusion Prevention System, IPS), etc., are all based on packet filtering methods, the focus and depth of defense Each is different, and it is difficult to effectively protect web services based on the application level. [0003] Based on the consideration of information security, we will install corresponding prot...

AI Technical Summary

Problems solved by technology

[0004] The purpose of the present invention is to provide a method and system for automatic verification of remote system security rules, aiming to solve the lack of a method for verifying whether the security rules are effectively issued and effective in the prior art, and realize automatic acquisition of defense according to the operating system and defense level. Rules, and test against defense rules, so as to realize automatic verification of security rules

Images