A bastion machine data acquisition and analysis method and device

Abstract

The invention discloses a data collection and analysis method and device of a bastion computer. By configuring operating parameters on the bastion computer, a probe program is installed, and a corresponding relationship between user objects and fingerprint information of the bastion computer is generated; The data is collected in real time; the data collected by the probe program is extracted, cleaned and preprocessed to obtain the processed data, and the processed data is classified and stored, and the user object, the bastion machine and the processing The processed data corresponding to at least two bastion hosts against each other are respectively subjected to collision analysis and comparison according to the categories stored in classification to obtain a comparison result. Real-time collection and analysis of the data of the bastion machine through the probe program, the evaluation results are obtained, and the configuration information is dynamically updated to reduce the operation and maintenance cost of the game, and provide data support for the replay after the game.

Description

technical field [0001] The invention relates to the field of network security, in particular to a bastion machine data collection and analysis method and device. Background technique [0002] With the rapid development of information technology, the cyberspace composed of the Internet, communication networks, computer systems, automation control systems, digital devices and the applications, services, and data they carry is changing people's production and lifestyle in an all-round way, and has a profound impact on the development of human society. historical development process. Cyberspace security is related to national security, political stability, economic development and personal privacy security, so it has become the focus of attention at home and abroad in recent years. The two tasks of ensuring cyberspace security and cultivating cybersecurity talents have risen to the level of national strategies. [0003] The network security attack and defense competition is ba...

AI Technical Summary

Problems solved by technology

[0008] In view of the above-mentioned problems in the network security attack and defense confrontation competition, it is impossible to collect the service status, operation status, configuration data and other information of the bastion machine in real time and conduct objective and effective analysis.

Images