Security management system for guaranteeing software development environment
By adopting security management systems with virtualization technology, access control and real-time monitoring modules in the software development environment, the problem of difficulty in comprehensively protecting the development environment with existing technology is solved, and the project isolation, abnormal behavior monitoring and code integrity are achieved. Assure.
Patent Information
- Application Number
- CN202411487891.8
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-10-24
- Publication Date
- 2025-02-14
AI Technical Summary
The existing software development environment security management methods are difficult to fully protect the security of the development environment, and there is a risk of data leakage and malware injection.
Provides a security management system, including a security isolation module, an access control module and a real-time monitoring module. The security isolation module creates an independent development environment through virtualization technology, the access control module manages user access rights, and monitors the module in real time to capture and analyze user activities to prevent abnormal behavior.
Ensure project isolation through virtualization technology, monitor development environment activities, promptly detect abnormal behaviors, improve development environment security, reduce the risks of data breaches and malware injection, and ensure complete code by managing user access rights and recording operation audits sex.
Smart Images
Figure CN119442269A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the technical field of software development environment, and in particular to a security management system for ensuring software development environment. Background Art
[0002] In the modern software development process, the security management of the software development environment is crucial. There are a lot of codes and sensitive information in the software development environment. Once obtained by malicious attackers, it will cause serious losses to enterprises and users. The existing software development environment security management methods have many shortcomings and it is difficult to fully protect the security of the development environment. Summary of the invention
[0003] The technical problem to be solved by the present invention is to provide a security management system for protecting a software development environment, which can ensure data security and code integrity during the software development process.
[0004] The technical solution adopted by the present invention to solve the technical problem is: to provide a security management system for protecting the software development environment, including:
[0005] Security isolation module, used to isolate the user end from the development environment;
[0006] The access control module is used to manage the access rights of the user terminal and verify the access request of the user terminal, and after the verification is passed, control the security isolation module to connect the user terminal to the corresponding development environment;
[0007] The real-time monitoring module is connected to the security isolation module and is used to monitor all activities of the user end accessing the corresponding development environment.
[0008] The safety isolation module comprises:
[0009] A hardware isolation unit, used to convert the kernel of the operating system into virtual hardware using virtualization technology;
[0010] A network isolation unit is used to allocate an independent virtual LAN to each development environment and set up a virtual firewall for each virtual LAN;
[0011] Storage isolation unit, used to configure independent network file system shares for different development environments and set permission control for the network file system.
[0012] The access control module comprises:
[0013] A permission allocation unit, used to allocate a role to each user terminal, wherein each role has different access rights;
[0014] A request interception unit, used to intercept access requests sent by the user end;
[0015] A verification unit, used to determine the role of the user end that issues the access request, and verify whether the access request content is legal based on the obtained user end role;
[0016] The control unit is used to control the security isolation module to connect the user end to the corresponding development environment when the access request content is legal.
[0017] The access control module also includes:
[0018] The permission adjustment unit is used to adjust the access rights of the user terminal according to the current environment based on the dynamic access control policy;
[0019] A temporary authority unit is used to assign temporary authority to a user terminal and automatically revoke the temporary authority after a specific task or project is completed;
[0020] The fine-grained permission setting unit is used to set fine-grained access permissions for specific data objects.
[0021] The real-time monitoring module includes:
[0022] The keyboard input monitoring unit is used to capture all keyboard input events of the user end through a global keyboard hook, identify the keyboard input events through regular matching, and issue an alarm when an abnormality is identified, wherein the captured keyboard input events are saved in a local encrypted log file;
[0023] The malicious command detection unit is used to identify the commands input by the user terminal through a machine learning model and issue an alarm after identifying the malicious commands, wherein the identified malicious commands are also used to adjust and optimize the machine learning model.
[0024] The security management system for ensuring the software development environment also includes: an audit module for recording all operations of the user end and performing audit analysis.
[0025] The audit module includes:
[0026] An audit log recording unit is used to record all operations of the user end as an audit log file, and store the recorded audit log file in a centralized database or log management system, wherein each log in the audit log file contains a timestamp, user ID, operation type, operation object and operation result;
[0027] Audit analysis unit, which uses machine learning algorithms to analyze audit log files and issue alerts when abnormal access behavior is detected;
[0028] The audit report unit is used to generate an audit report based on the analysis results of the audit analysis unit, wherein the audit report includes a summary of activities and abnormal access records of the user end.
[0029] The audit module also includes: an encryption unit, which is used to encrypt the audit log file and sensitive information of the user end.
[0030] Beneficial Effects
[0031] Due to the adoption of the above technical solution, the present invention has the following advantages and positive effects compared with the prior art: the present invention uses virtualization technology to create an independent development environment to ensure isolation between projects, and monitors all activities in the development environment to promptly discover abnormal behaviors, improve the security of the development environment, and reduce the risk of data leakage and malware injection. The present invention also manages user access rights, records all operations for auditing, and ensures code integrity through integrated security management, thereby improving the efficiency and effectiveness of security management. BRIEF DESCRIPTION OF THE DRAWINGS
[0032] Figure 1 It is a structural block diagram of a security management system for ensuring a software development environment according to an embodiment of the present invention. DETAILED DESCRIPTION
[0033] The present invention will be further described below in conjunction with specific embodiments. It should be understood that these embodiments are only used to illustrate the present invention and are not intended to limit the scope of the present invention. In addition, it should be understood that after reading the content taught by the present invention, those skilled in the art can make various changes or modifications to the present invention, and these equivalent forms fall within the scope limited by the appended claims of the application equally.
[0034] The embodiments of the present invention relate to a security management system for protecting a software development environment, such as Figure 1 As shown, it includes the following main modules: security isolation module, access control module and real-time monitoring module.
[0035] The security isolation module in this implementation isolates the user end from the development environment, and includes a hardware isolation unit, a network isolation unit, and a storage isolation unit.
[0036] The hardware isolation unit uses virtualization technology to convert the kernel of the operating system into virtual hardware. For example, KVM, a virtualization technology based on the Linux kernel, converts the Linux kernel into a Hypervisor. Each virtual machine (VM) runs as an independent process with its own virtual hardware.
[0037] The network isolation unit allocates an independent virtual LAN to each development environment and sets up a virtual firewall for each virtual LAN. Based on the allocated virtual LAN, the traffic of different environments can be isolated through the network switch, thereby preventing data leakage, controlling the inbound and outbound traffic through the virtual firewall, and increasing network security.
[0038] The storage isolation unit configures independent network file system shares for different development environments and sets permission control for the network file system, thus ensuring that data between environments does not interfere with each other and limiting the access rights of different users and environments.
[0039] The access control module in this embodiment manages the access rights of the user terminal and verifies the access request of the user terminal, and after the verification, controls the security isolation module to connect the user terminal to the corresponding development environment. The access control module in this embodiment includes: a permission allocation unit, a request interception unit, a verification unit and a control unit.
[0040] The permission allocation unit is used to allocate a role (such as administrator, developer, auditor, etc.) to each user terminal, wherein each role has different access rights, and the access rights include operations such as read, write, delete, and modify.
[0041] The request interception unit is used to intercept access requests from the user end. It implements the access request interception mechanism in the data access layer. All data operation requests will undergo permission checks.
[0042] The verification unit is used to determine the role of the user end that issues the access request, and verify whether the access request content is legal based on the obtained user end role. When performing verification, the role of the user end is first determined through the access request, and then the access control list (ACL) is searched based on the obtained user end role, and the content of the access request is compared with the access control list to determine whether the access content is in the access control list. If it is, it means that the access request content is legal, and if not, it means that the access request content is illegal.
[0043] The control unit is used to control the security isolation module to connect the user end to the corresponding development environment when the access request content is legal.
[0044] The access control module in this embodiment also includes: a permission adjustment unit, which is used to adjust the access rights of the user terminal according to the current environment (such as time, location, user status, etc.) based on a dynamic access control strategy; a temporary permission unit, which is used to assign temporary permissions to the user terminal and automatically revoke the temporary permissions after a specific task or project is completed; a fine-grained permission setting unit, which is used to set fine-grained access rights for specific data objects (such as files, database records). Fine-grained permission settings can ensure that only authorized users can access sensitive data.
[0045] The real-time monitoring module in this embodiment is connected to the security isolation module and is used to monitor all activities of the user end accessing the corresponding development environment. It mainly includes a keyboard input monitoring unit and a malicious command detection unit.
[0046] Among them, the keyboard input monitoring unit is used to capture all keyboard input events of the user end through a global keyboard hook, and identify the keyboard input events through a regular matching method, and issue an alarm when an abnormality (such as sensitive commands, malicious scripts, etc.) is identified, wherein the captured keyboard input events (including key values, timestamps, user IDs, etc.) are saved to a local encrypted log file. In this embodiment, the SetWindowsHookEx function in the Windows API can be used to set a global keyboard hook, which will intercept every key operation of the user at the system level. When an alarm is issued, the administrator can be immediately alerted through a set notification mechanism (such as email, text message, etc.).
[0047] The malicious command detection unit is used to identify the commands input by the user end through a machine learning model, and to issue an alarm after identifying a malicious command. The machine learning model in this embodiment is trained based on a classification model (such as a random forest, a support vector machine, etc.), which is obtained by collecting historical input data to obtain a data set, annotating the data set with normal commands and malicious commands, and then using the annotated data set for training. The trained model can extract features (such as command length, special character frequency, command source, etc.) from the input command to enhance the recognition ability of the model, and the identified malicious commands can also be used to adjust and optimize the machine learning model to improve detection accuracy.
[0048] The security management system for ensuring the software development environment in this embodiment also includes: an audit module for recording all operations of the user end and performing audit analysis, which includes an audit log recording unit, an audit analysis unit and an audit report unit.
[0049] The audit log recording unit records all operations of the user end (including login, logout, data access, permission change and other events) as audit log files, and stores the recorded audit log files in a centralized database or log management system to ensure data integrity and security, wherein each log in the audit log file contains a timestamp, user ID, operation type, operation object and operation result. The recorded audit log files also implement an automatic log rotation mechanism, through which historical logs can be archived regularly to save storage space.
[0050] The audit analysis unit uses machine learning algorithms (such as cluster analysis, outlier detection, etc.) to analyze audit log files and issue an alarm when abnormal access behavior (such as frequent failed login attempts or unauthorized data access) is analyzed.
[0051] The audit report unit generates an audit report based on the analysis results of the audit analysis unit, wherein the audit report includes a summary of user-side activities and abnormal access records, and supports exporting to multiple formats (such as PDF, CSV).
[0052] To ensure data security during storage and transmission, the audit module in this embodiment also includes: an encryption unit for encrypting the audit log file and sensitive information of the user end, and a strong encryption algorithm (such as AES-256) can be used for encryption.
[0053] It is not difficult to find that the present invention uses virtualization technology to create an independent development environment to ensure isolation between projects, while monitoring all activities in the development environment, timely discovering abnormal behaviors, improving the security of the development environment, and reducing the risk of data leakage and malware injection. The present invention also manages user access rights, records all operations for auditing, ensures code integrity through integrated security management, and improves the efficiency and effectiveness of security management.
Claims
1. A security management system for ensuring a software development environment, characterized in that: include: Security isolation module, used to isolate the user end from the development environment; The access control module is used to manage the access rights of the user end and verify the access requests of the user end. After the verification is passed, the security isolation module is controlled to connect the user end to the corresponding development environment; The real-time monitoring module is connected to the security isolation module and is used to monitor all activities of the user end accessing the corresponding development environment.
2. The security management system for ensuring a software development environment according to claim 1, characterized in that: The safety isolation module comprises: A hardware isolation unit, used to convert the kernel of the operating system into virtual hardware using virtualization technology; A network isolation unit is used to allocate an independent virtual LAN to each development environment and set up a virtual firewall for each virtual LAN; Storage isolation unit, used to configure independent network file system shares for different development environments and set permission control for the network file system.
3. The security management system for ensuring a software development environment according to claim 1, characterized in that: The access control module comprises: A permission allocation unit, used to allocate a role to each user terminal, wherein each role has different access rights; A request interception unit, used to intercept access requests sent by the user end; A verification unit, used to determine the role of the user end that issues the access request, and verify whether the access request content is legal based on the obtained user end role; The control unit is used to control the security isolation module to connect the user end to the corresponding development environment when the access request content is legal.
4. The security management system for ensuring a software development environment according to claim 1, characterized in that: The access control module also includes: The permission adjustment unit is used to adjust the access rights of the user terminal according to the current environment based on the dynamic access control policy; A temporary authority unit is used to assign temporary authority to a user terminal and automatically revoke the temporary authority after a specific task or project is completed; The fine-grained permission setting unit is used to set fine-grained access permissions for specific data objects.
5. The security management system for ensuring a software development environment according to claim 1, characterized in that: The real-time monitoring module includes: The keyboard input monitoring unit is used to capture all keyboard input events of the user end through a global keyboard hook, identify the keyboard input events through regular matching, and issue an alarm when an abnormality is identified, wherein the captured keyboard input events are saved in a local encrypted log file; The malicious command detection unit is used to identify the commands input by the user terminal through a machine learning model and issue an alarm after identifying the malicious commands, wherein the identified malicious commands are also used to adjust and optimize the machine learning model.
6. The security management system for ensuring a software development environment according to claim 1, characterized in that: Also includes: The audit module is used to record all operations on the user side and perform audit analysis.
7. The security management system for ensuring a software development environment according to claim 6, characterized in that: The audit module includes: An audit log recording unit is used to record all operations of the user end as an audit log file, and store the recorded audit log file in a centralized database or log management system, wherein each log in the audit log file contains a timestamp, user ID, operation type, operation object and operation result; Audit analysis unit, which uses machine learning algorithms to analyze audit log files and issue alerts when abnormal access behavior is detected; The audit report unit is used to generate an audit report based on the analysis results of the audit analysis unit, wherein the audit report includes a summary of activities and abnormal access records of the user end.
8. The security management system for ensuring a software development environment according to claim 7, characterized in that: The audit module also includes: an encryption unit, which is used to encrypt the audit log file and sensitive information of the user end.