Bastion host

Abstract

The invention discloses a bastion host. The bastion host serves as an operation and maintenance operation gateway of a data center. An identity account, a server account and a matching relationship between the identity account and the server account are arranged in the bastion host; each server account has respective operation authority, the bastion host establishes connection between the terminaland the server according to the operation authority, and the terminal operates the server to form an operation log to be stored in the bastion host. The bastion host has the advantages that the bastion host confirms the identity of the person twice: the responsible person applying for entering belongs to a set of persons allowed to enter, and the person applying for entering is the person. Thus,the problem of fuzzy identity is solved, and if the problem is found, people can be directly traced back. Identity authentication, access control, authority control and operation auditing can be carried out on the terminal entering the server at the equipment and host layers, and behaviors of workers are restrained and monitored.

Description

technical field [0001] The invention relates to the field of information security, in particular to an access control auditing system. This access control audit system is called a bastion machine. Background technique [0002] This section is only for the convenience of understanding the content of the present invention, and should not be regarded as prior art. [0003] According to the different users of the network, the network can be divided into extranet (Internet) and intranet (local area network). The intranet can be divided into office network and production network. The network behavior of office Internet access is relatively developed, and virus and network intrusion incidents are prone to occur. If office users and production users are in the same network, viruses and intrusion events that occur on the office network will quickly spread to the production network with almost no obstacles, posing a great threat to production security. Therefore, the office networ...

AI Technical Summary

Problems solved by technology

[0004] Servers, network equipment, databases, security equipment, and middleware are all assets of the data center. Due to the large number, variety, multi-brand, and rapid change of asset equipment, it is difficult to sort out the asset ledger; and asset risks are diverse and scattered. The security department is neither a data producer nor a data center builder, but the technology department, as a data producer and data center builder, focuses on IT efficiency rather than IT security; the security department focuses on IT security rather than IT security. Emphasis on IT efficiency; resulting in security departments failing to obtain asset security data, asset risks are difficult to identify, and industry security rules are difficult to implement

Images