Dynamic minimized privilege access control method and device

Abstract

The invention discloses a dynamic minimized privilege access control method and a dynamic minimized privilege access control device. The method comprises the following steps that different privilege access rules are distributed to corresponding privilege access users; after the user logs in, only the privileged account in the corresponding privileged access rule range can be seen, and only the privileged access in the privileged access rule range can be performed on the privileged account; commands or operations carried out in the privilege access process and seen data are judged whether to accord with privilege access rules or not by the dynamic permission execution module; if not, the privileged access operation of the user is intercepted, or the displayed data is shielded; and when an activity record inconsistent with the use track is generated, the privilege behavior analysis module defines the activity record as a threat, and the dynamic permission execution module judges whetherthe current privilege access operation needs to be intercepted or not according to the privilege access rule. According to the invention, related personnel can only carry out privileged access with the minimum permission matched with the personnel, and personnel unauthorized operation is effectively avoided.

Description

Technical field [0001] The invention relates to the field of privileged access security control, in particular to a method and device for dynamically minimizing privileged access control. Background technique [0002] Privileged access refers to the process of using / accessing privileged accounts with high risks (such as administrator accounts that can start and stop devices) or high value (such as application accounts that can read business sensitive data), but not all privileges All the permissions or functions of the privileged account are required for access. Major security incidents (deleted databases / data leaks) that have occurred in recent years are often due to the privilege scope of the privileged account owned by the person who needs privileged access is far greater than the privilege he needs to use, so that the person can be "legitimate" Of illegal operations. Therefore, it is particularly important to dynamically control the privileged access of related personnel wi...

AI Technical Summary

Problems solved by technology

However, there is currently no effective method to avoid unauthorized access

Images