Security group strategy management method, apparatus and device, and computer readable storage medium

Abstract

The invention discloses a security group strategy management method, apparatus and device and a computer readable storage medium, and relates to the field of financial science and technology, and themethod comprises the following steps: matching a corresponding source region for a source IP in a security group strategy according to a preset region mapping relation, and matching a corresponding target region for a target IP; judging whether the security group strategy is illegal or not according to a preset audit rule, the source region and the target region; and if the security group strategyis illegal, performing security management and control on the security group strategy; automatically judging whether the security group strategy is illegal or not according to the area to which the source IP and the target IP belong in the security group strategy and the preset auditing rule. Therefore, when the security group strategy violates rules, security management and control are automatically carried out on the security group strategy, automatic auditing of the security group strategy is further realized, the auditing efficiency of the security group strategy is improved, and comprehensive auditing can be carried out on a large number of security group strategies.

Description

technical field [0001] The present invention relates to the network security field of financial technology (Fintech), in particular to a security group policy management method, device, equipment and computer-readable storage medium. Background technique [0002] With the development of computer technology, more and more technologies are applied in the financial field, and the traditional financial industry is gradually transforming into Fintech. However, due to the security and real-time requirements of the financial industry, higher requirements are placed on technology. requirements [0003] The cloud service platform is a new enterprise information service model and management method, which can manage massive and highly virtualized enterprise resources and applications to form a unified service integrating resource pools and enterprise applications. [0004] The security groups on the cloud service platforms of financial institutions such as banks are implemented based ...

AI Technical Summary

Problems solved by technology

[0005] The main purpose of the present invention is to provide a security group policy management method, device, equipment and readable storage medium, aiming to solve the technical problem that the prior art cannot make a comprehensive automatic audit on the compliance of the security group policy

Images