Network security operation and maintenance management system based on bastion host

Abstract

The invention discloses a network security operation and maintenance management system based on a bastion host, and belongs to the technical field of operation and maintenance management. The system comprises an operation and maintenance personnel security authentication layer, an operation and maintenance data acquisition layer, an operation and maintenance data storage, analysis and processing layer and an operation and maintenance process security management layer. The operation and maintenance personnel safety certification layer is used for carrying out safety certification login of operation and maintenance personnel; the operation and maintenance data acquisition layer is used for acquiring data in an operation and maintenance process; the operation and maintenance data storage, analysis and processing layer is used for storing, analyzing and processing data generated in an operation and maintenance process and optimizing an operation and maintenance scene; the operation and maintenance process safety management layer is used for monitoring and early warning abnormal behaviors occurring in the operation and maintenance process. According to the invention, the operation and maintenance scene can be optimized, the method is more suitable for the operation and maintenance operation of each operation and maintenance person, and safe operation and maintenance management can be carried out according to the change of the time interval in the operation and maintenance operation.

Description

technical field [0001] The invention relates to the technical field of operation and maintenance management, in particular to a network security operation and maintenance management system based on a bastion host. Background technique [0002] The bastion host is in a specific network environment, in order to protect the network and data from intrusion and damage from external and internal users, various technical means are used to monitor and record the operation and maintenance personnel's attention to the servers, network equipment, and security in the network. Operational behaviors of equipment, databases and other equipment for centralized alarm, timely processing and audit determination. [0003] The bastion host can implement a series of functions such as account management, identity authentication, resource authorization, access control, and operation audit. The machine controls the server host, which can audit the entire operation behavior of character strings, gra...

AI Technical Summary

Problems solved by technology

[0003] The bastion host can implement a series of functions such as account management, identity authentication, resource authorization, access control, and operation audit. The machine controls the server host, which can audit the entire operation behavior of character strings, graphics, file transfers, databases, etc.; through equipment video recording, the operation and maintenance personnel can monitor in real time various operations performed by the operation and maintenance personnel on the operating system, security equipment, network equipment, database, etc. However, due to the different habits of each operation and maintenance personnel, the operation steps are different, and the content in the operation and maintenance process is also different, so in the same scene of the bastion machine, there will be a lot of inconvenience. For example, the operation and maintenance personnel need to open many pages to search Search, two consecutive operations need to be opened on two pages, and then clicked with the interface cursor, which is not conducive to the operation of the operation and maintenance personnel, and is prone to freezes, affecting normal work

[0004] Moreover, once the user account information is stolen, the server can be controlled through the bastion host to change the host information and steal business secrets. The server cannot judge whether the account is operated by a real operation and maintenance personnel, so it cannot respond in time

Images