Security software deployment method and device, computer readable medium and program product

Abstract

The invention provides a security software deployment method and device, a computer readable medium and a program product, the application provides a security software deployment method, the method is applied to a security system of the security software deployment device, and the method comprises the following steps: subscribing to network access request information of a server; based on the network access request information, determining a server which is not deployed with security software as a target server; and issuing a security software deployment instruction to a central control machine of the security software deployment equipment, so that the central control machine deploys security software to the target server.

Description

Technical Field

[0001] The present application relates to the technical field of server security monitoring, and in particular to a security software deployment method, device, computer-readable medium, and program product. Background Art

[0002] This section is intended to provide a background or context to the embodiments of the application that are recited in the claims. The description herein is not admitted to be prior art by inclusion in this section.

[0003] With the development of information technology, data centers have become key infrastructure for enterprises and service providers to host applications, store data, and provide network services. Data centers usually contain a large number of servers, which are the center of data processing, so their security is crucial.

[0004] With the development of enterprise business and the popularization of cloud computing services, the number of servers in data centers has increased dramatically. The increase in the number of servers has increased the complexity of security management. For example, servers may be deployed to data centers through various channels, including but not limited to standardized initialization, migration, and third-party delivery. Non-standardized deployment processes may lead to the installation of host security software being neglected or omitted.

[0005] Existing security software deployment methods mainly include manual installation and security through script automation tools; among them, the manual installation of security software to the server has the following defects: on the one hand, it is inefficient; on the other hand, the manual installation process is time-consuming and error-prone, and highly dependent on the experience and availability of operation and maintenance personnel; on the other hand, it is difficult to scale, and it is impractical to manually install security software on a large number of servers. There are the following problems when installing security software to the server through script automation tools: on the one hand, in the existing technology, the security software deployment node is usually when the server is initialized. Once it is an unconventional process such as migration or third-party delivery, the security software installation may be omitted; on the other hand, it cannot be guaranteed that all servers can execute the security software installation script, which leads to the failure of security software installation. Summary of the invention

[0006] Multiple aspects of the present application provide a security software deployment method, device, computer-readable storage medium and program product to implement automated deployment of security software on a server.

[0007] In one aspect of the present application, a secure software deployment method is provided for application to a secure system of a secure software deployment device, the method comprising:

[0008] Subscribe to the server's network access request information;

[0009] Based on the network access request information, determining a server on which no security software is deployed as a target server;

[0010] A security software deployment instruction is issued to the central control machine of the security software deployment device, so that the central control machine deploys the security software to the target server.

[0011] Furthermore, based on the network access request information, determining that a server on which no security software is deployed is a target server includes: obtaining the IP address and host name of the server based on the network access request information; indexing the server corresponding to the IP address and host name and the security software deployment status of the server based on the IP address and host name; and determining that the server on which no security software is deployed is a target server.

[0012] Further, subscribing to the server's network access request information includes: subscribing to the server's network access request information from a preset message queue, the preset message queue being generated by the VPC network in the security software deployment device; wherein the VPC network generates the preset message queue, including: in response to the network access request sent by the server, obtaining the server's network access request information, the network access request information including the IP address and the host name; publishing the server's network access request information to the preset message queue.

[0013] Furthermore, the method also includes: obtaining the security software deployment status of the target server until the security software is successfully deployed to the target server; if the security software is not successfully deployed to the target server, obtaining deployment error information of the target security software, and feeding back the deployment error information to the operation and maintenance personnel.

[0014] Another aspect of the present application provides a security software deployment method, which is applied to a central control machine of a security software deployment device, and the method includes: obtaining attribute information of a target server in response to a security software deployment instruction issued by a security system of the security software deployment device; deploying the security software to the target server based on the attribute information of the target server and preset security software deployment rules; wherein the target server is a server on which the security software is to be deployed.

[0015] Furthermore, based on the attributes of the target server and preset security software deployment rules, the security software is deployed to the target server, including: based on the attribute information of the target server, obtaining the configuration information and environmental attributes of the target server; based on the configuration information and the environmental attributes, pulling the target security software adapted to the target server from a preset security software library; and deploying the target security software to the target server.

[0016] In another aspect of the present application, a secure software deployment device is provided, the device comprising:

[0017] A subscription unit, used to subscribe to the network access request information of the server;

[0018] a target server determination unit, configured to determine, based on the network access request information, a server on which no security software is deployed as a target server;

[0019] The instruction issuing unit is used to issue the security software deployment instruction to the central control machine of the security software deployment device to deploy the security software to the target server.

[0020] In another aspect of the present application, a secure software deployment device is provided, the device comprising:

[0021] A response unit, configured to obtain attribute information of a target server in response to a security software deployment instruction issued by a security system of the security software deployment device;

[0022] A deployment unit is used to deploy the security software to the target server based on the attribute information of the target server and a preset security software deployment rule; wherein the target server is a server on which the security software is to be deployed.

[0023] Another aspect of the present application provides an electronic device, the device comprising:

[0024] at least one processor; and

[0025] a memory communicatively connected to the at least one processor; wherein,

[0026] The memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to perform the secure software deployment method as described above.

[0027] In another aspect of the present application, a computer-readable storage medium is provided, on which computer program instructions are stored. The computer program instructions can be executed by a processor to implement the secure software deployment method.

[0028] Another aspect of the present application provides a computer program product, including a computer program, wherein the computer program implements the secure software deployment method when executed by a processor.

[0029] Compared with the security software deployment node in the prior art, the security software deployment method described in the present application detects the security software deployment status of the server when the server sends a network access request to the data center VPC network, thereby avoiding the server being attacked, service data leaked, or suffering other security threats due to omission of deploying security software to the server;

[0030] Furthermore, the present application realizes the automation and adaptability deployment of security software through the central control machine, which reduces the consumption of manpower and material resources, reduces the probability of failure of security software deployment, ensures the adaptability of security software and server, and thus ensures the normal operation of security software;

[0031] Furthermore, the method described in the present application monitors the deployment status of the security software in real time during the security software deployment process, and when the security software deployment fails, an alarm is issued to notify the operation and maintenance personnel to intervene and handle, thereby ensuring that there is no omission of the deployment of security software on the server;

[0032] In summary, this application reduces the deployment vulnerabilities of server security software and improves the server's anti-attack capabilities and security performance through automated and standardized security software deployment steps. BRIEF DESCRIPTION OF THE DRAWINGS

[0033] In order to more clearly illustrate the technical solutions in the embodiments of the present application, a brief introduction will be given below to the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0034] Other features, objects and advantages of the present application will become more apparent by reading the detailed description of non-limiting embodiments made with reference to the following drawings:

[0035] Figure 1 A flowchart of a secure software deployment method provided in one embodiment of the present application;

[0036] Figure 2 A flowchart of a secure software deployment method provided by another embodiment of the present application;

[0037] Figure 3 A schematic diagram of the structure of a secure software deployment device provided in another embodiment of the present application;

[0038] Figure 4 A schematic diagram of the structure of a secure software deployment device provided in yet another embodiment of the present application;

[0039] Figure 5 A schematic diagram of the structure of an electronic device suitable for implementing the solution in the embodiments of the present application;

[0040] The same or similar reference numerals in the drawings represent the same or similar components. DETAILED DESCRIPTION

[0041] In order to make the purpose, technical solution and advantages of the embodiments of the present application clearer, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0042] In a typical configuration of the present application, the terminal and the equipment of the service network each include one or more processors (CPU), input / output interface, network interface and memory.

[0043] The memory may include non-permanent storage in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. The memory is an example of a computer-readable medium.

[0044] Computer readable media include permanent and non-permanent, removable and non-removable media, and can be implemented by any method or technology to store information. Information can be computer program instructions, data structures, modules of programs or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, read-only compact disk (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device.

[0045] The present application provides a method for deploying secure software, which is applied to a security system of a secure software deployment device. The method includes:

[0046] Subscribe to the server's network access request information;

[0047] Based on the network access request information, determining a server on which no security software is deployed as a target server;

[0048] A security software deployment instruction is issued to the central control machine of the security software deployment device, so that the central control machine deploys the security software to the target server.

[0049] In actual scenarios, the execution subject of the method can be a user device, or a device formed by integrating a user device and a network device through a network, or an application running on the above device. The user device includes but is not limited to various terminal devices such as computers, mobile phones, tablet computers, smart watches, and bracelets. The network device includes but is not limited to network hosts, single network servers, multiple network server sets, or cloud computing-based computer sets, which can be used to implement some processing functions when setting an alarm. Here, the cloud is composed of a large number of hosts or network servers based on cloud computing, where cloud computing is a type of distributed computing, a virtual computer composed of a group of loosely coupled computer sets.

[0050] Embodiment 1

[0051] Figure 1 The processing flow of a secure software deployment method provided in an embodiment of the present application is shown. The method is applied to a security system of a secure software deployment device. The method includes at least the following processing steps:

[0052] Step S101, subscribing to the network access request information of the server;

[0053] Step S102, based on the network access request information, determining that a server without security software deployed is a target server;

[0054] Step 103: Send a security software deployment instruction to the central control machine of the security software deployment device, so that the hollow machine deploys the security software to the target server.

[0055] Specifically, in this embodiment, when the security system subscribes to the network access request information of the server, it immediately detects the deployment status of the security software of the server. Through real-time network access detection, it is ensured that the deployment status of the security software of each server is normal.

[0056] In one embodiment, based on the network access request information, determining that a server on which no security software is deployed is a target server includes: obtaining the IP address and host name of the server based on the network access request information; indexing the server corresponding to the IP address and host name and the security software deployment status of the server based on the IP address and host name; and determining that the server on which no security software is deployed is the target server.

[0057] Specifically, indexing the server corresponding to the IP address and the host name is: determining the server according to the IP address and the host name. The deployment status of the security software includes but is not limited to undeployed and deployed.

[0058] In one embodiment, based on the IP address and host name index and the corresponding server and the security software deployment status of the server, it also includes: if the security software deployment status is unsuccessful deployment (that is, security software has been deployed on the server, but the security software is not compatible with the server), then when the security software pre-deployed on the server is uninstalled, the server is determined to be the target server.

[0059] In one embodiment, subscribing to a server's network access request information includes: subscribing to a server's network access request information from a preset message queue, wherein the preset message queue is generated by a VPC network in the security software deployment device; wherein the VPC network generates the preset message queue, including: in response to a network access request sent by a server, obtaining the server's network access request information, wherein the network access request information includes an IP address and a host name; and publishing the server's network access request information to the preset message queue.

[0060] Among them, after the VPC network generates a preset message queue and obtains the server's network access request information, it sends the server's network access request information to the central control machine; when the central control machine approves the server's network access request, the VPC network publishes the server's network access request information to the preset message queue.

[0061] Specifically, the VPC network sends the server's network access request information to the central control machine, including but not limited to sending the server's network access request information to the central control machine through logs.

[0062] In one embodiment, the method further includes: obtaining the security software deployment status of the target server until the security software is successfully deployed to the target server; if the security software is not successfully deployed to the target server, obtaining deployment error information of the target security software, and feeding back the deployment error information to the operation and maintenance personnel.

[0063] In one embodiment, the deployment error information includes an error category and an error time.

[0064] Specifically, an operation and maintenance management interface is reserved on the server. When the security system finds that the security software has not been successfully deployed to the target server, the operation and maintenance personnel manually trigger the installation of the security software to the server through the central control machine.

[0065] The operation and maintenance personnel manually trigger the installation of security software on the server through the central control machine, including: manually inputting the host name of the server into the central control machine and repeating the security software deployment operation.

[0066] Based on the security software deployment method described in the above embodiment, when the server is connected to the data center network for the first time (that is, the network access request is sent for the first time and the network access request is approved), the security software deployment status of the server is automatically and real-time detected to ensure the successful deployment of the server's security software and prevent the server from being attacked due to the non-deployment or unsuccessful deployment of the security software.

[0067] Embodiment 2

[0068] Figure 2 The processing flow of a secure software deployment method provided by an embodiment of the present application is shown. The method is applied to a central control machine of a secure software deployment device. The method includes at least the following processing steps:

[0069] Step S201, in response to a security software deployment instruction issued by the security system of the security software deployment device, acquiring attribute information of the target server;

[0070] Step S202: deploy the security software to the target server based on the attribute information of the target server and the preset security software deployment rules.

[0071] Specifically, after the central control machine responds to the security software deployment instruction issued by the security system of the security software deployment device, the central control machine issues an attribute information acquisition instruction to the target server; after the target server receives the attribute information acquisition instruction, the script of the target server collects the attribute information of the target server; wherein the attribute information of the target server includes configuration information and environment attributes. wherein the configuration information includes operating system version information and hardware version information.

[0072] The target server is a server on which the security software is to be deployed, that is, the target server determined in step S102 of the security software deployment method described in the first embodiment.

[0073] In one embodiment, the security software is deployed to the target server based on the attributes of the target server and preset security software deployment rules, including: obtaining configuration information and environmental attributes of the target server based on the attribute information of the target server; pulling target security software compatible with the target server from a preset security software library based on the configuration information and the environmental attributes; and deploying the target security software to the target server.

[0074] The preset security software library includes security software corresponding to each configuration information and environment attribute. By obtaining the configuration information and environment attribute of the target server, the target security software adapted to the target server can be pulled from the preset security software library.

[0075] Based on the security software deployment method proposed in Example 2, the automated, large-scale, and consistent deployment of security software is achieved. On the one hand, it reduces the consumption of manpower and material resources and improves the deployment efficiency of security software; on the other hand, it reduces the error rate of security software deployment; and on the other hand, it avoids the problem of different server security protection levels caused by inconsistent security software deployment methods.

[0076] Embodiment 3

[0077] Figure 3 A secure software deployment device provided in an embodiment of the present application is shown, the device comprising:

[0078] A subscription unit, used to subscribe to the network access request information of the server;

[0079] a target server determination unit, configured to determine, based on the network access request information, a server on which no security software is deployed as a target server;

[0080] The instruction issuing unit is used to issue the security software deployment instruction to the central control machine of the security software deployment device to deploy the security software to the target server.

[0081] Embodiment 4

[0082] Figure 4 A secure software deployment device provided in an embodiment of the present application is shown, the device comprising:

[0083] a response unit, configured to obtain attribute information of the target server in response to a security software deployment instruction issued by the security system of the security software deployment device;

[0084] A deployment unit is used to deploy the security software to the target server based on the attribute information of the target server and a preset security software deployment rule.

[0085] Embodiment 5

[0086] Based on the same inventive concept, an electronic device is also provided in an embodiment of the present application, and the method corresponding to the electronic device may be the model training method and the traffic screening method for traffic screening in the aforementioned embodiment, and its principle of solving the problem is similar to that of the method. The electronic device provided in an embodiment of the present application includes: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the methods and / or technical solutions of the aforementioned multiple embodiments of the present application.

[0087] The electronic device may be a user device, or a device formed by integrating a user device and a network device through a network, or may be an application running on the above device. The user device includes but is not limited to various terminal devices such as computers, mobile phones, tablet computers, smart watches, and bracelets. The network device includes but is not limited to network hosts, single network servers, multiple network server sets, or cloud computing-based computer sets, which can be used to implement some processing functions when setting an alarm. Here, the cloud is composed of a large number of hosts or network servers based on cloud computing, where cloud computing is a type of distributed computing, a virtual computer composed of a group of loosely coupled computer sets.

[0088] Figure 5 The structure of an electronic device suitable for implementing the method and / or technical solution in the embodiment of the present application is shown, and the device 500 includes a central processing unit (CPU, Central Processing Unit) 501, which can perform various appropriate actions and processes according to the program stored in the read-only memory (ROM, Read Only Memory) 502 or the program loaded from the storage part 508 to the random access memory (RAM, Random Access Memory) 503. In RAM503, various programs and data required for system operation are also stored. CPU 501, ROM 502 and RAM 503 are connected to each other through a bus 504. An input / output (I / O, Input / Output) interface 505 is also connected to the bus 504.

[0089] The following components are connected to the I / O interface 505: an input section 506 including a keyboard, a mouse, a touch screen, a microphone, an infrared sensor, etc.; an output section 507 including a cathode ray tube (CRT), a liquid crystal display (LCD), an LED display, an OLED display, etc., and a speaker, etc.; a storage section 508 including one or more computer-readable media such as a hard disk, an optical disk, a magnetic disk, a semiconductor memory, etc.; and a communication section 509 including a network interface card such as a LAN (Local Area Network) card, a modem, etc. The communication section 509 performs communication processing via a network such as the Internet.

[0090] In particular, the methods and / or embodiments in the embodiments of the present application may be implemented as computer software programs. For example, the embodiments disclosed in the present application include a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program includes program code for executing the method shown in the flowchart. When the computer program is executed by the central processing unit (CPU) 501, the above functions defined in the method of the present application are executed.

[0091] Embodiment 6

[0092] Another embodiment of the present application further provides a computer-readable storage medium having computer program instructions stored thereon, wherein the computer program instructions can be executed by a processor to implement the methods and / or technical solutions of any one or more embodiments of the present application described above.

[0093] Specifically, the present embodiment can adopt any combination of one or more computer-readable media. Computer-readable media can be computer-readable signal media or computer-readable storage media. Computer-readable storage media can be, for example, but not limited to, electrical, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices or devices, or any combination of the above. More specific examples (non-exhaustive list) of computer-readable storage media include: electrical connections with one or more wires, portable computer disks, hard disks, random access memories (RAM), read-only memories (ROM), erasable programmable read-only memories (EPROM or flash memory), optical fibers, portable compact disk read-only memories (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination of the above. In this document, computer-readable storage media can be any tangible medium containing or storing a program, which can be used by an instruction execution system, device or device or used in combination with it.

[0094] Computer readable signal media may include a data signal propagated in baseband or as part of a carrier wave, which carries a computer readable program code. Such propagated data signals may take a variety of forms, including, but not limited to, electromagnetic signals, optical signals, or any suitable combination of the above. Computer readable signal media may also be any computer readable medium other than a computer readable storage medium, which may send, propagate, or transmit a program for use by or in conjunction with an instruction execution system, device, or device.

[0095] Program code embodied on a computer readable medium may be transmitted using any appropriate medium, including but not limited to wireless, wireline, optical fiber cable, RF, etc., or any suitable combination of the foregoing.

[0096] Computer program code for performing the operations of the present application may be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages, such as Java, Smalltalk, C++, and conventional procedural programming languages, such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0097] The flow chart or block diagram in the accompanying drawings shows the possible architecture, function and operation of the equipment, method and computer program product according to various embodiments of the present application. In this regard, each square box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the module, the program segment or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some implementations as replacements, the functions marked in the square box can also occur in a sequence different from that marked in the accompanying drawings. For example, two square boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each square box in the block diagram and / or flow chart, and the combination of the square boxes in the block diagram and / or flow chart can be implemented with a dedicated system for hardware that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0098] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0099] In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation. For example, multiple units or page components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interfaces, devices or units, which can be electrical, mechanical or other forms.

[0100] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0101] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of hardware plus software functional units.

[0102] The above-mentioned integrated unit implemented in the form of a software functional unit can be stored in a computer-readable storage medium. The above-mentioned software functional unit is stored in a storage medium, including a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) or a processor to perform some steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (Read-Only Memory, ROM), random access memory (Random Access Memory, RAM), disk or optical disk and other media that can store program codes.

[0103] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit it. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present application.

[0104] In addition, it is clear that the word "comprising" does not exclude other units or steps, and the singular does not exclude the plural. Multiple units or devices stated in a device claim can also be implemented by one unit or device through software or hardware. The words first, second, etc. are used to indicate names, and do not indicate any particular order.

Claims

1. A method for deploying secure software, characterized in that: A security system applied to a security software deployment device, the method comprising: Subscribe to the server's network access request information; Based on the network access request information, determining a server on which no security software is deployed as a target server; A security software deployment instruction is issued to the central control machine of the security software deployment device, so that the central control machine deploys the security software to the target server.

2. The method for deploying secure software according to claim 1, characterized in that: Based on the network access request information, determining that a server on which no security software is deployed is a target server includes: Based on the network access request information, obtaining the IP address and host name of the server; Index the server corresponding to the IP address and host name and the security software deployment status of the server; Identify servers that do not have security software installed as target servers.

3. The method for deploying secure software according to claim 2, characterized in that: Subscribe to the server's network access request information, including: Subscribe to the network access request information of the server from a preset message queue, where the preset message queue is generated by the VPC network in the security software deployment device; The VPC network generates the preset message queue, including: In response to the network access request sent by the server, obtaining the network access request information of the server, wherein the network access request information includes an IP address and a host name; Publish the network access request information of the server to a preset message queue.

4. The method for deploying secure software according to claim 3, characterized in that: The method further comprises: Obtaining the security software deployment status of the target server until the security software is successfully deployed to the target server; If the security software is not successfully deployed to the target server, deployment error information of the target security software is obtained, and the deployment error information is fed back to the operation and maintenance personnel.

5. A method for deploying secure software, characterized in that: A central control machine applied to a security software deployment device, the method comprising: Responding to a security software deployment instruction issued by a security system of the security software deployment device, acquiring attribute information of a target server; Deploy the security software to the target server based on the attribute information of the target server and the preset security software deployment rules; The target server is the server on which the security software is to be deployed.

6. The method for deploying secure software according to claim 5, characterized in that: Deploying the security software to the target server based on the attributes of the target server and a preset security software deployment rule includes: Based on the attribute information of the target server, obtaining configuration information and environment attributes of the target server; Pulling target security software adapted to the target server from a preset security software library based on the configuration information and the environment attribute; Deploy the target security software to the target server.

7. A secure software deployment device, characterized in that: The device comprises: A subscription unit, used to subscribe to the network access request information of the server; A target server determination unit, configured to determine, based on the network access request information, a server on which no security software is deployed as a target server; The instruction issuing unit is used to issue the security software deployment instruction to the central control machine of the security software deployment device to deploy the security software to the target server.

8. A secure software deployment device, characterized in that: The device comprises: A response unit, configured to obtain attribute information of a target server in response to a security software deployment instruction issued by a security system of the security software deployment device; A deployment unit, configured to deploy the security software to the target server based on the attribute information of the target server and a preset security software deployment rule; The target server is the server on which the security software is to be deployed.

9. An electronic device, characterized in that: The electronic device comprises: at least one processor; and a memory communicatively connected to the at least one processor; wherein, The memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to perform the method according to any one of claims 1 to 6.

10. A computer readable medium having computer program instructions stored thereon, characterized in that: The computer program instructions are executable by a processor to implement the method according to any one of claims 1 to 6.

11. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the method according to any one of claims 1 to 6 is implemented.

Images