Remote command execution method and device based on SSH protocol

Abstract

The invention relates to the field of finance science and technology, and discloses a remote command execution method and device based on an SSH protocol. The method comprises the steps: obtaining an ASCII code for analyzing a key instruction through an SSH server based on any key instruction outputted by an SSH client; determining a remote command output by the SSH client based on each ASCII (American Standard Code for Information Interchange) code returned by the SSH server; and after determining that the remote command meets the operation requirement, sending the remote command to the SSH server. According to the mode, the effect of performing safety detection on the command when the command is not executed is realized, so that some dangerous commands are intercepted, and the safety of the SSH server is guaranteed.

Description

technical field [0001] The embodiment of the present application relates to the field of financial technology (Fintech), and in particular to a remote command execution method and device based on the SSH protocol. Background technique [0002] With the development of computer technology, more and more technologies (such as cloud computing, big data or blockchain) are applied in the financial field, and the traditional financial industry is gradually transforming into financial technology. In the context of big data technology, the banking industry is based on an SSH client, a software program that connects to a remote computer using the Secure Shell protocol, enabling efficient management of massive amounts of data. For example, when the user enters a command on the SSH client and presses the Enter key, the SSH client can send the command to the server for execution, such as the ls command for viewing files, the rm command for deleting files, etc. [0003] However, the proc...

AI Technical Summary

Problems solved by technology

[0005] 1. It is unknown whether this command will cause excessive consumption of server resources

For example, in Kubernetes, its restrictions on resources are very strict, and improper commands entered by users can easily cause OOM (Out of Memory, memory overflow);

[0006] 2. Whether the command is a high-risk operation command will not be known

[0008] It can only obtain the content entered by the user, but it cannot capture the content of auto-completion, shortcut input, etc., that is, it cannot parse complex control commands, such as the ctrl+a combination key to indicate jumping to the previous character, and the up key to indicate returning to the previous character. A command and the tab key indicate automatic completion, which will lead to inaccurate parsing of the user input command, so the legality verification based on the inaccurate command will inevitably fail to guarantee the absolute security of the command to be executed

Images