Host network configuration auditing method, system and device

Abstract

The invention discloses a host network configuration auditing method, system and device. On one hand, whether current network configuration changes or not is rapidly judged by monitoring change of a network configuration file; and on the other hand, in order to prevent file monitoring failure caused by invariable configuration files when configuration information is modified by using an ifconfig command, whether the configuration information is changed or not is judged periodically by actively acquiring the configuration information, and corresponding logs are generated for changed configuration items, so that effective audit on host network configuration is realized.

Description

technical field [0001] The invention belongs to the technical field of computer and network security, and in particular relates to a method, system and device for auditing network configuration changes of a host. Background technique [0002] Due to the widespread use of network services and applications, computers are used more and more in different network environments at different locations. In network management, the network configuration of terminal computers is an important part of daily management, and it is also a cumbersome thing. Network configuration information usually includes computer name, IP address, subnet mask, gateway, DNS (Domain Name System), WINS (Windows Internet Naming Server), etc. The centralized and unified management of IP addresses and related network configurations is to ensure the normal operation of computer networks. For the basic work of operation, for large-scale networks, the computer level of end users is uneven, and the network configur...

AI Technical Summary

Problems solved by technology

Network configuration information usually includes computer name, IP address, subnet mask, gateway, DNS (Domain Name System), WINS (Windows Internet Naming Server), etc. The centralized and unified management of IP addresses and related network configurations is to ensure the normal operation of computer networks. For the basic work of operation, for large-scale networks, the computer level of end users is uneven, and the network configuration information of terminal computers is often modified at will. These behaviors of modifying terminal configuration without permission will cause IP conflicts, network disconnection, and fraudulent use of IP. Serious consequences such as illegal operation

When the network configuration information of a terminal computer changes (such as modifying the IP address, reinstalling the operating system), the server will define it as a new terminal computer, resulting in errors in the original information and failure to execute policies or tasks. Will form a lot of invalid terminal computer network configuration information