Automatic reinforcing method for security configuration of information system

Abstract

The invention discloses an automatic reinforcing method for security configuration of an information system. The method comprises developing automated consolidated script programs for security configuration items of various operating systems, databases and middleware, integrating a complete reinforcing script and a complete backspacing script into a unified WEB management system, connecting the system with a target system to complete reinforcement, and managing and recording the whole reinforcing process. The method disclosed by the invention is developed for the configuration reinforcement ofcommon components such as the server operating system, the database and the middleware; operation and maintenance personnel are helped to confront with equipment and software environments with complicated types and large quantities in the network; equipment can be quickly and effectively inspected, automatic safety reinforcement can be performed, risk auditing reports can be made, projects whichdo not accord with safety specifications can be ultimately identified, accordingly, rectification compliance requirements can be met, the method is high in quick deployment and application capacity, diversified reinforcement choices can be provided for the operation and maintenance personnel, and the method can be popularized widely.

Description

technical field [0001] The invention relates to the technical field of security assurance of information systems, in particular to an automatic reinforcement method for security configuration of an information system. Background technique [0002] In recent years, my country's power system has accelerated its pace towards the market, and the national power industry system has begun to transform into the market. Power supply companies at all levels have established information systems and Internet-based management applications to improve labor productivity, improve management levels, strengthen information feedback, and improve Scientific and accurate decision-making improves the comprehensive competitiveness of enterprises. However, with the interconnection of the power information network and its complete integration into the Internet, the power information network is facing increasingly prominent information system security issues. As a national infrastructure, the informa...

AI Technical Summary

Problems solved by technology

[0004] It is the most basic requirement for information system security to conduct security configuration inspections based on enterprise and industry security configuration guidance standards and specifications. By adopting unified security configuration standards to standardize the daily operations of technicians on various systems, operation and maintenance personnel have However, in actual work, security operation and maintenance personnel still encounter the problem that security configuration inspection and problem repair need to be done manually, which requires high skills and experience of inspectors, and the workload is huge

Images