Integrated tactic managing system based on expandable label language

Abstract

The invention relates to a unified strategy management system based on the extensible markup language in the computer security management filed, which includes a strategy server, a designer and a shared library. In which, the strategy designer makes a general security strategy for convenient management through visual strategy definition interface. The strategy server compiles a configuration rule of unified definition to the specific configuration rule of different products based on equipment type information field of unified strategy and presetting security equipment configuration files, and then distribute the rule to corresponding equipments in right order, they also provide a report system for security administrator to reflect the current state of the strategy and monitor equipment, issue a warning and report their activities. The strategy shared libraries store all security strategy defined by PDL uniformly for inquiring, generating reports or audit.

Description

technical field [0001] The invention relates to a system in the field of computer safety management, in particular to a unified policy management system based on an extensible markup language. Background technique [0002] As security issues have attracted more and more attention from various units, deploying various security products has become an indispensable protection choice. Now, in order to achieve a high level of security, some government departments have purchased a variety of security products and implemented a variety of security strategies. There are many security products from different manufacturers, including firewall (Firewall), virtual private network (VPN), anti-virus gateway, intrusion detection (IDS) and so on. The security management and service system can well solve the closed-loop problem between various security subsystems, but it still does not effectively manage all security subsystems in a unified manner. The construction principles of security m...

AI Technical Summary

Problems solved by technology

There is also a policy management subsystem nested in the security management platform, such as the security policy subsystem in Lenovo Wangyu security management platform and Tianrongxin-TSM trusted security management platform products, but the functions are very limited, not Versatility

[0004] In further novelty searches, no literature reports identical or similar to the subject of the present invention have been found

Images