A zero-trust based host password control method

Abstract

The invention discloses a method for managing and controlling host passwords based on zero trust, including a method for bringing hosts into management and control, a method for forcibly resetting host passwords after the expiration date, and a method for processing abnormal login passwords; the invention generates passwords through password construction strategies The password can meet the password strength requirements of the host, significantly reducing the risk of weak passwords of the host, and realizes the management and audit of the host password through unified management and control, ensures the implementation of the regular forced replacement policy of the host password, and saves the host password to the entity's identification card , which significantly increases the difficulty of password cracking and identity forgery. At the same time, users do not need to record complex host passwords, and can complete password-free login with an ID card, realizing the full lifecycle management of host passwords.

Description

technical field [0001] This application relates to network security host security management, in particular to a zero-trust-based host password management and control method. Background technique [0002] Weak passwords are a typical network and information security problem, which widely exist in various occasions. Once the host passwords involved in the network are cracked by network attackers, identity spoofing, illegal access, privilege theft, etc. will occur, resulting in leakage or loss of important data. Even if the attacker only obtains the password of the non-core system host, he will have the conditions to perform lateral jumps within the network and further escalate privileges, and then pose a threat to the security of the core system. According to the "barrel principle" of network security protection, the overall security level of the system depends on the "short board" of system security protection, and the host password security cannot be ignored. [0003] In ...

AI Technical Summary

Problems solved by technology

[0006] 3. The password of the host computer is usually set by the machine user. When the network security is strengthened, the workload of host security verification and auditing is heavy, and it is difficult to realize automatic auditing and unified management.

Images