Bastion host data acquisition and analysis method and device

Abstract

The invention discloses a bastion host data acquisition and analysis method and device. The bastion host data acquisition and analysis method comprises the steps: configuring operation parameters on abastion host, installing a probe program, and generating a corresponding relation between a user object and bastion host fingerprint information; acquiring data of the bastion host in real time through a probe program; carrying out data extraction, data cleaning and preprocessing on the data collected by the probe program to obtain processed data, carrying out classified storage on the processeddata, and associating the user object, the bastion host and the processed data through bastion host fingerprint information; and performing collision analysis and comparison on the processed data corresponding to the at least two bastion machines which confront each other according to the categories stored in a classified manner to obtain a comparison result. The bastion host data is collected andanalyzed in real time through a probe program, and then an evaluation result is obtained; and configuration information is dynamically updated, and the operation and maintenance cost of a match is reduced, and data support is provided for replay after the match.

Description

technical field [0001] The invention relates to the field of network security, in particular to a data collection and analysis method and device for a bastion machine. Background technique [0002] With the rapid development of information technology, the network space composed of the Internet, communication network, computer system, automatic control system, digital equipment and the applications, services and data carried by it is comprehensively changing people's production and lifestyle, and profoundly affecting the development of human society. historical development process. Cyberspace security is related to national security, political stability, economic development and personal privacy security, so it has become the focus of attention at home and abroad in recent years. Ensuring cyberspace security and cultivating cybersecurity talents have risen to the level of national strategy. [0003] The network security attack and defense confrontation competition is based ...

AI Technical Summary

Problems solved by technology

[0008] In view of the above-mentioned problems in the network security attack and defense confrontation competition, it is impossible to collect the service status, operation status, configuration data and other information of the bastion machine in real time and conduct objective and effective analysis.

Images