Method and device for active notification and automatic management of privileged accounts

Abstract

The present invention discloses a method and device for actively notifying and automatically managing privileged accounts. The method includes: A) auditing and monitoring the IT infrastructure of an enterprise or organization by the log audit module, when a privileged account is generated or disappears When log, it is stored in the data storage module; B) the log of the log audit module is sent to the data storage module for storage; C) the message-driven module monitors whether the data storage module has Log writing, if yes, execute step D); Otherwise, return to step A); D) notify the account management module, the account management module will obtain privileged account related information to the data storage module according to the notification received, And perform security management on privileged accounts. The present invention can notify the privileged account management system in real time when the privileged account is generated or disappears and perform corresponding processing, thereby improving the security of the privileged account and preventing theft or abuse.

Description

technical field [0001] The present invention relates to the field of privileged account security, in particular to a method and device for actively notifying and automatically managing privileged accounts. Background technique [0002] Privileged accounts refer to high-risk (such as administrator accounts that can start and stop devices) or high value (such as application accounts that can read business-sensitive data), which are often ignored by managers of enterprises or organizations. It is protected and managed into the privileged account management system to prevent attackers from exploiting it. However, in an enterprise or organization, the number of machines and privileged accounts is often dynamically expanded or reduced. It is difficult for managers to know in real time whether the number of machines and devices has changed, or whether the number of privileged accounts on the original machines has changed. Therefore, they can only regularly scan machines and device...

AI Technical Summary

Problems solved by technology

However, in an enterprise or organization, the number of machines and privileged accounts is often dynamically expanded or reduced. It is difficult for managers to know in real time whether the number of machines and devices has changed, or whether the number of privileged accounts on the original machines has changed. Therefore, they can only regularly scan machines and devices through tools to obtain the latest number and status of privileged accounts

But this will cause the management personnel of the enterprise or organization to be in a passive state, resulting in the privileged account not being protected in time, thus becoming one of the weapons of most attackers

Images