Resource auditing evaluation method and device, electronic equipment and storage medium

Abstract

The invention discloses a resource auditing evaluation method and device, electronic equipment and a storage medium. The method comprises the following steps: acquiring auditing data generated by auditing resources by a user; based on the data of each dimension in the audit data, respectively obtaining the management score of the user in the corresponding dimension; and obtaining an evaluation result for representing the resource audit risk according to the management score of each dimension. The auditing data generated by auditing the held cloud resource by the user is obtained, and the auditing data comprises records of auditing the resource in various aspects by the user, so that the management scores of the user in the corresponding dimensions can be respectively obtained based on data for describing different dimensions in the auditing data; according to the method and the device, the resource auditing capability evaluation of the user in each dimension is realized, so that the resource auditing risk is automatically evaluated by utilizing the management score of each dimension, the cloud use risk of the user in the auditing perspective is measured, the user can conveniently and effectively manage resources in a targeted manner, and the cloud use risk control capability of the user is improved.

Description

Technical Field

[0001] The present application relates to the field of cloud computing technology, and in particular to a resource audit evaluation method, device, electronic device and storage medium. Background Art

[0002] With the popularization of cloud computing technology, more and more individuals and enterprises have begun to use cloud services to reduce enterprise costs and improve efficiency. At the same time, the security and compliance issues of cloud resource use and management have begun to attract attention. Users need to use auditing methods to promptly discover and resolve potential risks and reduce losses and impacts caused by security, stability, compliance and other issues. Resource auditing has become a security guarantee for users to use and manage resources.

[0003] Therefore, how to effectively evaluate the risks of user resource audits on the cloud has become a technical problem that needs to be solved to achieve effective cloud resource management. Summary of the invention

[0004] The purpose of this application is to propose a resource audit evaluation method, device, electronic device and storage medium to address the deficiencies of the above-mentioned prior art, and this purpose is achieved through the following technical solutions.

[0005] The first aspect of the present application proposes a resource audit evaluation method, the method comprising:

[0006] Obtain audit data generated by users auditing resources;

[0007] Based on the data of each dimension in the audit data, respectively obtain the management score of the user in the corresponding dimension;

[0008] The assessment results used to characterize resource audit risks are obtained based on the management scores of each dimension.

[0009] A second aspect of the present application provides a resource audit evaluation device, the device comprising:

[0010] The data collection module is used to obtain the audit data generated by the user's audit of resources;

[0011] A score calculation module, used to obtain the management score of the user in the corresponding dimension based on the data of each dimension in the audit data;

[0012] The risk assessment module is used to obtain assessment results for characterizing resource audit risks based on the management scores of various dimensions.

[0013] The third aspect of the present application proposes an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the program to implement the method described in the first aspect above.

[0014] A fourth aspect of the present application provides a computer-readable storage medium having a computer program stored thereon, wherein the program is executed by a processor to implement the method described in the first aspect above.

[0015] Based on the resource audit evaluation method and device described in the first and second aspects above, the present application has at least the following beneficial effects or advantages:

[0016] By obtaining the audit data generated by users' audits of their own cloud resources, since the audit data contains records of users' audits of various aspects of resources, the user's management scores in the corresponding dimensions can be obtained based on the data used to describe different dimensions in the audit data, so as to realize the user's ability to audit resources in various dimensions. The management scores of each dimension can then be used to perform automated assessments of resource audit risks, so as to measure the user's cloud usage risks from an audit perspective, facilitate users to effectively manage resources in a targeted manner, and improve users' risk control capabilities in using the cloud.

[0017] The above description is only an overview of the technical solution of the present application. In order to more clearly understand the technical means of the present application, it can be implemented in accordance with the contents of the specification. In order to make the above and other purposes, features and advantages of the present application more obvious and easy to understand, the specific implementation methods of the present application are listed below. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0019] Figure 1 The present invention is a flow chart of an embodiment of a resource audit evaluation method according to an exemplary embodiment;

[0020] Figure 2 The present invention is a diagram showing an overall scheme framework for implementing resource audit evaluation according to an exemplary embodiment;

[0021] Figure 3 It is a structural schematic diagram of a resource audit evaluation device according to an exemplary embodiment;

[0022] Figure 4 is a schematic diagram of a hardware structure of an electronic device according to an exemplary embodiment;

[0023] Figure 5 The figure is a schematic diagram of the structure of a storage medium according to an exemplary embodiment. DETAILED DESCRIPTION

[0024] Exemplary embodiments will be described in detail herein, examples of which are shown in the accompanying drawings. When the following description refers to the drawings, the same numbers in different drawings represent the same or similar elements unless otherwise indicated. The implementations described in the following exemplary embodiments do not represent all implementations consistent with the present application. Instead, they are merely examples of devices and methods consistent with some aspects of the present application as detailed in the appended claims.

[0025] The terms used in this application are for the purpose of describing specific embodiments only and are not intended to limit this application. The singular forms of "a", "said" and "the" used in this application and the appended claims are also intended to include plural forms unless the context clearly indicates other meanings. It should also be understood that the term "and / or" used herein refers to and includes any or all possible combinations of one or more associated listed items.

[0026] It should be understood that although the terms first, second, third, etc. may be used in the present application to describe various information, these information should not be limited to these terms. These terms are only used to distinguish the same type of information from each other. For example, without departing from the scope of the present application, the first information may also be referred to as the second information, and similarly, the second information may also be referred to as the first information. Depending on the context, the word "if" as used herein may be interpreted as "at the time of" or "when" or "in response to determining".

[0027] In the field of cloud resource audit and analysis, cloud vendors are gradually showing the following development trends: on the one hand, they are paying more attention to automated and intelligent audit and analysis services to improve efficiency and accuracy; on the other hand, with the increase in application complexity and security threats, traditional regular audit and analysis can no longer meet application needs, and more real-time and continuous audit and analysis services are needed to respond to potential threats that may arise at any time; on the other hand, as enterprises increasingly adopt hybrid cloud and multi-cloud environments, they need to provide more comprehensive and integrated audit and analysis services to support the management of multiple platforms and environments; on the other hand, enterprises have different needs and sizes, and they need to provide more customizable and scalable audit and analysis services to facilitate personalized expansion of enterprises on the basis of meeting unified compliance requirements for multiple needs.

[0028] It can be seen that from the perspective of improving security, reliability, compliance and reducing risks, resource audit analysis is an important part of enterprise cloud governance. Therefore, in order to effectively and comprehensively evaluate the risks of user cloud resource audits, it is necessary to establish a reasonable evaluation method to achieve effective management of cloud resources and provide risk control for users.

[0029] In view of this, the present application proposes a resource audit assessment method, which obtains the audit data generated by the user's audit of the cloud resources he owns. Since the audit data contains records of various aspects of the user's audit of the resources, the user's management score in the corresponding dimension can be obtained based on the data used to describe different dimensions in the audit data, so as to realize the user's ability to conduct resource audits in various dimensions. The management score of each dimension is then used to perform an automated assessment of the resource audit risk, so as to measure the user's cloud usage risk from an audit perspective, facilitate the user to effectively manage resources in a targeted manner, and improve the user's risk control ability in using the cloud.

[0030] The technical solution of the present application and how the technical solution of the present application solves the above-mentioned technical problems are described in detail below with specific embodiments. The several specific embodiments listed can be combined with each other, and the same or similar concepts or processes may not be repeated in some embodiments. The embodiments of the present application will be described in detail below with reference to the accompanying drawings.

[0031] Figure 1 The flowchart of an embodiment of a cloud resource management evaluation method according to an exemplary embodiment includes the following steps 101 to 103:

[0032] Step 101: Obtain audit data generated by a user auditing resources.

[0033] In this step, the user can be an enterprise user or an individual user. The user representation may include the user's cloud account on the cloud. In addition, it may also include the user level, the resource directory (RD, ResourceDirectory) to which the user belongs, and the like.

[0034] When users manage and use their own cloud resources through various means (such as consoles, command line tools, SDKs (Software Development Kits), OpenAPIs (open application programming interfaces), and other tools for resource management), the resource audit service will be triggered, thereby generating some resource audit data. This audit data contains records of various aspects of the user's audit of the resources.

[0035] For example, assuming that the current user is enterprise A, when Zhang San, the manager of enterprise A, uses a certain resource management tool to manage the resources held by himself on the cloud, it will trigger the real-time audit workflow of the resources, thereby generating some audit data. When it is necessary to conduct a resource audit assessment on enterprise A, Zhang San can send a resource audit assessment request to the cloud platform, and after receiving the request, the cloud platform obtains the above audit data.

[0036] In an embodiment of the present application, audit data includes data records generated by various audit products (such as operation audit, configuration audit, audit compliance tools, etc.), so the types of audit data are complex and numerous. For example, audit data may include records of users turning on the resource management event collection function, retention time records of resource management events, records of areas in which users have turned on operation audits, audit results of resource instance specifications and versions held by users, which resources are idle, which resources are non-idle resources, which areas have configuration audits turned on, which basic rules are turned on for resources held by users, resource compliance coverage, non-compliant resource correction records, non-compliant resource delivery alarm records, records of users actively viewing non-compliant resources, etc.

[0037] In order to facilitate the summary, analysis and evaluation of complex and numerous audit data, audit data can be collected by dividing it into different dimensions to provide a comprehensive description of resource audits, which will facilitate the subsequent evaluation of capabilities in the corresponding dimensions.

[0038] Based on this, with regard to the audit data acquisition process, during the specific implementation, on the one hand, the operation management data generated by the user's audit of resources in the operation audit dimension is obtained; on the other hand, the resource management data generated by the user's audit of resources in the resource management dimension is obtained; and on the other hand, the compliance management data generated by the user's audit of resources in the compliance management dimension is obtained.

[0039] Among them, the operation management data of the operation audit dimension describes the behavior related to the user operation, which may include at least one sub-dimension parameter such as the activation status of the resource control event collection function, the setting status of the resource control event retention time, and the activation status of the user's full-area operation audit.

[0040] The resource management data of the resource management dimension describes the management status of the resources held by the user in all service areas, and may include at least one sub-dimension parameter of the user resource stability status and the user resource idle status. Specifically, the parameters of the sub-dimension of the user resource stability status may include any one or more parameters of whether the specifications of the user resource instance are compliant, whether the version of the user resource instance is compliant, whether the user resource instance is expired, and whether the user resource instance has enabled deletion protection. The parameters of the sub-dimension of the user resource idle status status may include any one or more parameters of the idle resource coverage rate, the number of idle resources, and the number of non-idle resources.

[0041] The compliance management data of the compliance management dimension describes the behavior of auditing and correcting user resources, and may include at least one sub-dimension parameter of whether the user has enabled configuration auditing, the basic rules for configuration auditing enabled by the user, the response of non-compliant resources, the automatic correction of non-compliant resources, and resource monitoring coverage. Specifically, the parameter of the sub-dimension of whether the user has enabled configuration auditing includes yes (1) or no (0). The parameters of the sub-dimension of the response of non-compliant resources may include any one or more of the number of alarms delivered by non-compliant resources and the number of times the user actively checks non-compliant resources. The parameters of the sub-dimension of the automatic correction of non-compliant resources may include the number of times non-compliant resources are automatically corrected. The parameters of the sub-dimension of resource monitoring coverage may include any one or more of the parameters of the coverage of user resources by basic rules and the resource compliance coverage rate.

[0042] It should be noted here that, according to actual assessment needs, the audit data obtained in the above three dimensions can be all or part of the resource audit data, and the dimensions can even be further expanded. This application does not make specific limitations on this.

[0043] Step 102: Based on the data of each dimension in the audit data, the management score of the user in the corresponding dimension is obtained respectively.

[0044] In this step, as mentioned above, the data of each dimension include the operation management data of the operation audit dimension, the resource management data of the resource management dimension, and the compliance management data of the compliance management dimension. Therefore, the management scores of the corresponding dimensions include the operation management score, the resource management score, and the compliance management score.

[0045] The higher the management score of the corresponding dimension, the stronger the user's audit management ability in this dimension. Specifically, the operation management score is used to measure the user's management level of security protection measures for the use of cloud resources. Assuming that the user turns on the resource control event collection function, the operation evidence can be retained and the historical operation records can be traced. The resource management score is used to measure the user's management level of various cloud resources, including but not limited to the management level of resource stability and resource idleness. The compliance management score is used to measure the user's level of resource compliance governance, including but not limited to whether there are basic rules set, alarm event delivery and processing, automatic correction of non-compliant resources, etc.

[0046] In an optional embodiment, for each dimension data, the weight corresponding to each sub-dimension included in the dimension data is obtained, and based on the weight corresponding to each sub-dimension and the parameters of each sub-dimension in the dimension data, the user's management score in the dimension is determined.

[0047] The weight corresponding to each sub-dimension indicates the importance of the score. The weight corresponding to each sub-dimension can be set according to actual needs, but it should be noted that the sum of the weights of all sub-dimensions is 1.

[0048] The process of determining the management score of the user in the dimension based on the weight corresponding to each sub-dimension and the parameters of each sub-dimension in the dimensional data. Optionally, the score of each sub-dimension can be determined separately based on the parameters of each sub-dimension, and then the weight corresponding to each sub-dimension and the score of each sub-dimension are used to perform weighted summation to obtain the management score of the user in the dimension.

[0049] In the specific implementation, it is assumed that the set O is a set of sub-dimensions in a dimensional data, and the score of each sub-dimension is set to O. i , i is a positive integer greater than or equal to 1, λ i is the weight corresponding to each sub-dimension, and the parameter of each sub-dimension is K j , there are m parameters, ω i is the calculation function for the score of each sub-dimension. The score of each sub-dimension is obtained by the following formula 1, and the management score of the current dimension is obtained by the following formula 2.

[0050] O i =ω i (K j |1≤j≤m) Formula 1

[0051]

[0052] For example, in the operation management dimension, assuming that there are 10 areas in the operation audit that are operation audit indicators, and the user currently has operation audits enabled for 8 areas, and the number of unenabled areas is 2, then the proportion of regional operation audit indicators enabled by the user is 0.8, and the score of the regional operation audit indicator can be obtained as 100*0.8=80 points. Assuming that the weight of the regional operation audit indicator in the operation management dimension is 0.2, and the scores of other sub-dimensions in the operation management dimension total 70 points, the management score of the operation management dimension is 70+80*0.2=86 points.

[0053] For another example, in the compliance management dimension, assuming that configuration audit sets 5 basic rules as scoring indicators for configuration audit rules, and the user currently enables 3 of the basic rules on the cloud, and the number of unenabled basic rules is 2, then the proportion of basic rules enabled by the user is 0.6, and the score for enabling basic rules is 100*0.6=60 points. Assuming that the weight of enabling basic rules in the compliance management dimension is 0.3, and the scores of other sub-dimensions in the compliance management dimension total 60 points, the management score of the compliance management dimension is 60+60*0.3=78 points.

[0054] Step 103: Obtain an assessment result for characterizing resource audit risk based on the management scores of each dimension.

[0055] In this step, the evaluation results represent the overall effect of cloud resource audit management.

[0056] In an optional embodiment, a comprehensive management score is obtained by obtaining the weights corresponding to each dimension and taking a weighted sum of the management scores of each dimension and the weights corresponding to each dimension. Then, the risk level to which the comprehensive management score belongs is determined based on preset risk classification information. The comprehensive management score and the risk level to which it belongs are then used to generate an assessment result that characterizes the resource audit risk.

[0057] The preset risk classification information includes risk level classification information of different comprehensive management scores. Assuming that the comprehensive management score is 100 points, for example, the score level classification is: greater than or equal to 80 points is safe, greater than 60 points and less than 80 points are risky, and less than or equal to 60 points are high-risk. According to the above level classification standard, if the comprehensive management score is 71 points, it means that the user's audit level of cloud resources is at a risk level.

[0058] Furthermore, the higher the comprehensive management score is, the stronger the user's ability in cloud resource auditing is. The specific calculation formula of the comprehensive management score is as follows3:

[0059]

[0060] Where N represents the number of dimensions, ρ i represents the weight corresponding to the i-th dimension, S i Represents the management score of the i-th dimension.

[0061] It should be noted that after executing step 103, the assessment results used to characterize resource audit risks can be displayed to the user, that is, the user's comprehensive management score for cloud resource audits and the risk level to which they belong. In addition, the management scores of various dimensions can also be displayed, so that users can govern cloud resource audits based on this displayed information to improve the scores of corresponding dimensions, thereby improving the user's risk control capabilities when using the cloud.

[0062] For example, in the resource management dimension, assuming that the number of resources monitored in the idle resource detection of the user is 50, after detecting the idle resources, it is found that 20 of them are idle resources and 30 are non-idle resources. The proportion of non-idle resources of the user is 0.6, and the score of the idle resource detection sub-dimension can be calculated as 100*0.6=60 points. Assuming that the weight of idle resource detection in the resource management dimension is 0.3, and the combined score of other dimensions of the resource management module is 60, the management score of the resource management dimension is 60+60*0.3=78 points. Assuming that the weight of the resource management module in the comprehensive management score of the user resource audit is 0.4, and the management scores of other dimensions of the resource audit are 50 in total, the comprehensive management score of the user resource audit is 50+78*0.4=81.2 points.

[0063] When the cloud governance center guides users to clean up all non-idle resources based on the comprehensive management score of resource audit, the score of the user idle resource detection sub-dimension becomes 100 points, and further, the management score of the resource management dimension becomes 60+100*0.3=90 points, so that the comprehensive management score of user resource audit becomes 50+90*0.4=86 points. Compared with the comprehensive management score before the above governance, the comprehensive management score has increased by 86-81.2=4.8 points.

[0064] At this point, the above Figure 1 The resource audit assessment process shown in the figure obtains the audit data generated by the user's audit of the cloud resources he owns. Since the audit data contains records of various aspects of the user's audit of the resources, the user's management score in the corresponding dimension can be obtained based on the data used to describe different dimensions in the audit data, so as to realize the user's ability to conduct resource audit in each dimension. Then, the management score of each dimension is used to perform an automated assessment of the resource audit risk, so as to measure the user's cloud usage risk from the audit perspective, facilitate the user to effectively manage resources in a targeted manner, and improve the user's risk control ability in using the cloud.

[0065] Based on the above Figure 1 Based on the illustrated embodiment, the resource audit evaluation process is described in detail below. Figure 2According to an exemplary embodiment, a framework diagram of an overall solution for implementing resource audit evaluation is shown. When a user manages cloud resources, the resource audit service is triggered, thereby generating data on resource auditing. These audit data contain records of various aspects of the user's audit of resources. The audit data of each dimension is obtained by using three-dimensional data collection modules, including an operation management module, a resource management module, and a compliance management module. Among them, the operation management module is used to collect the operation management data generated by the user auditing resources in the operation audit dimension, including at least one sub-dimensional parameter in the activation of the resource control event collection function, the setting of the resource control event retention time, and the user's activation of the full-area operation audit; the resource management module is used to collect the resource management data generated by the user auditing resources in the resource management dimension, including at least one sub-dimensional parameter in the user resource stability and user resource idleness; the compliance management module is used to collect the compliance management data generated by the user auditing resources in the compliance management dimension, including whether the user turns on configuration auditing, the basic rules for configuration auditing turned on by the user, the response of non-compliant resources, the automatic correction of non-compliant resources, and the resource monitoring coverage.

[0066] Then, each data collection module corresponds to a data calculation model, and the corresponding dimension management score is calculated by using the data calculation model. Specifically, the operation management model uses the resource control event collection function collected by the operation management module to open the status, the resource control event retention time setting, and the user's operation audit in the whole area to open the operation management score; the resource management model uses the user resource stability and user resource idleness collected by the resource management module to calculate the resource management score; the compliance management model uses the compliance management module to collect whether the user has enabled the configuration audit, the basic rules for configuration audit enabled by the user, the response of non-compliant resources, the automatic correction of non-compliant resources, and the resource monitoring coverage to calculate the compliance management score.

[0067] Then, a resource audit total score calculation model is used to perform weighted calculation on the management scores of each dimension obtained from the above calculation to obtain a comprehensive management score and determine the risk level to which the comprehensive management score belongs.

[0068] Finally, the final assessment results are generated by combining the management scores, comprehensive management scores, and risk levels of each dimension obtained through the above calculations. The assessment results are then displayed to users through the cloud governance center to guide users to adopt targeted governance solutions for resource audit governance, so as to improve their risk control capabilities when using the cloud.

[0069] The execution subject of the embodiment of the present application can be an application, service, instance, software-based functional module, virtual machine (VM), container or cloud server, etc., or a hardware device (such as a server or terminal device) or hardware chip (such as CPU, GPU, FPGA, NPU, AI acceleration card or DPU) with data processing function. The device for implementing the evaluation of resource audit can be deployed on the computing device of the application party providing the corresponding service or on the cloud computing platform that provides computing power, storage and network resources. The mode of providing services to the outside world by the cloud computing platform can be IaaS (Infrastructure as a Service), PaaS (Platform as a Service), SaaS (Software as a Service) or DaaS (Data as a Service). Taking the platform providing SaaS software as a service (Software as a Service) as an example, the cloud computing platform can use its own computing resources to provide the training of the evaluation model of resource audit or the functional execution of the evaluation module of resource audit, and the specific application architecture can be built according to the service requirements. For example, the platform can provide construction services based on the above model to applications or individuals who use platform resources, and further call the above model and implement online or offline resource audit evaluation functions based on resource audit evaluation requests submitted by relevant clients or servers and other devices.

[0070] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with the relevant laws, regulations and standards of the relevant countries and regions, and provide corresponding operation entrances for users to choose to authorize or refuse.

[0071] Corresponding to the aforementioned embodiment of the resource audit evaluation method, the present application also provides an embodiment of the resource audit evaluation device.

[0072] Figure 3 FIG. 1 is a schematic diagram of a resource audit evaluation device according to an exemplary embodiment. The device is used to execute the resource audit evaluation method provided in any of the above embodiments. Figure 3 As shown, the resource audit evaluation device includes:

[0073] The data collection module 310 is used to obtain audit data generated by users auditing resources;

[0074] The score calculation module 320 is used to obtain the management score of the user in the corresponding dimension based on the data of each dimension in the audit data;

[0075] The risk assessment module 330 is used to obtain an assessment result for characterizing resource audit risks according to the management scores of various dimensions.

[0076] In an optional implementation, the data collection module 310 is specifically used to obtain operation management data generated by users auditing resources in the operation audit dimension; obtain resource management data generated by users auditing resources in the resource management dimension; obtain compliance management data generated by users auditing resources in the compliance management dimension.

[0077] In an optional implementation, the score calculation module 320 is specifically used to obtain, for each dimensional data, the weights corresponding to each sub-dimension included in the dimensional data; based on the weights corresponding to each sub-dimension and the parameters of each sub-dimension in the dimensional data, determine the user's management score in the dimension.

[0078] In an optional implementation, the score calculation module 320 is specifically used to determine the score of each sub-dimension based on the parameters of each sub-dimension in the process of determining the management score of the user in the dimension based on the weights corresponding to each sub-dimension and the parameters of each sub-dimension in the dimensional data; and to perform weighted summation using the weights corresponding to each sub-dimension and the scores of each sub-dimension to obtain the management score of the user in the dimension.

[0079] In an optional implementation, the operation management data includes at least one sub-dimension parameter of the activation status of the resource control event collection function, the activation status of the user's operation audit in the entire area, and the setting status of the resource control event retention time; the resource management data includes at least one sub-dimension parameter of the user resource stability status and the user resource idle status; the compliance management data includes at least one sub-dimension parameter of whether the user enables configuration auditing, the basic rules for configuration auditing enabled by the user, the response status of non-compliant resources, the automatic correction status of non-compliant resources, and the resource monitoring coverage status.

[0080] In an optional implementation, the risk assessment module 330 is specifically used to obtain the weights corresponding to each dimension, and to obtain a comprehensive management score by weighted summing up the management scores of each dimension and the weights corresponding to each dimension; determining the risk level to which the comprehensive management score belongs based on preset risk classification information; and using the comprehensive management score and the risk level to generate an assessment result that characterizes the resource audit risk.

[0081] In an optional implementation, the device further includes ( Figure 3 Not shown):

[0082] The display module is used to display the evaluation results for characterizing the resource audit risk to the user after obtaining the evaluation results for characterizing the resource audit risk according to the management scores of each dimension.

[0083] The implementation process of the functions and effects of each unit in the above-mentioned device is specifically described in the implementation process of the corresponding steps in the above-mentioned method, and will not be repeated here.

[0084] For the device embodiment, since it basically corresponds to the method embodiment, the relevant parts can refer to the partial description of the method embodiment. The device embodiment described above is only schematic, wherein the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the present application scheme. A person of ordinary skill in the art can understand and implement it without paying any creative work.

[0085] The embodiment of the present application also provides an electronic device corresponding to the resource audit evaluation method provided in the above embodiment to execute the above resource audit evaluation method.

[0086] Figure 4 The hardware structure diagram of an electronic device according to an exemplary embodiment is shown, and the electronic device includes: a communication interface 601, a processor 602, a memory 603 and a bus 604; wherein the communication interface 601, the processor 602 and the memory 603 complete mutual communication through the bus 604. The processor 602 can execute the resource audit evaluation method described above by reading and executing the machine executable instructions corresponding to the control logic of the resource audit evaluation method in the memory 603. The specific content of the method is referred to the above embodiment, and will not be repeated here.

[0087] The memory 603 mentioned in this application can be any electronic, magnetic, optical or other physical storage device, and can contain storage information, such as executable instructions, data, etc. Specifically, the memory 603 can be RAM (Random Access Memory), flash memory, storage drive (such as hard disk drive), any type of storage disk (such as optical disk, DVD, etc.), or similar storage medium, or a combination thereof. The communication connection between the system network element and at least one other network element is realized through at least one communication interface 601 (which can be wired or wireless), and the Internet, wide area network, local area network, metropolitan area network, etc. can be used.

[0088] The bus 604 may be an ISA bus, a PCI bus or an EISA bus, etc. The bus may be divided into an address bus, a data bus, a control bus, etc. The memory 603 is used to store programs, and the processor 602 executes the programs after receiving execution instructions.

[0089] Processor 602 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method can be completed by an integrated logic circuit of hardware in processor 602 or an instruction in software form. The above-mentioned processor 602 can be a general-purpose processor, including a network processor (Network Processor, referred to as NP), a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a readily available programmable gate array (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components, etc. The disclosed methods, steps and logic block diagrams in the embodiments of the present application can be implemented or executed. The general-purpose processor can be a microprocessor or the processor can also be any conventional processor, etc. The steps of the method disclosed in conjunction with the embodiments of the present application can be directly embodied as a hardware decoding processor to execute, or the hardware and software modules in the decoding processor are combined to execute.

[0090] The electronic device provided in the embodiment of the present application and the resource audit evaluation method provided in the embodiment of the present application are based on the same inventive concept and have the same beneficial effects as the methods adopted, operated or implemented therein.

[0091] The present application also provides a computer-readable storage medium corresponding to the resource audit evaluation method provided in the above-mentioned embodiment. Figure 5 As shown, the computer-readable storage medium shown is a CD 30 on which a computer program (ie, a program product) is stored. When the computer program is executed by a processor, the resource audit evaluation method provided by any of the aforementioned implementations will be executed.

[0092] It should be noted that examples of the computer-readable storage medium may also include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other optical or magnetic storage media, which are not listed here one by one.

[0093] The computer-readable storage medium provided by the above-mentioned embodiments of the present application and the resource audit evaluation method provided by the embodiments of the present application are based on the same inventive concept and have the same beneficial effects as the methods adopted, run or implemented by the application programs stored therein.

[0094] Those skilled in the art will readily appreciate other embodiments of the present application after considering the specification and practicing the invention disclosed herein. The present application is intended to cover any modification, use or adaptation of the present application, which follows the general principles of the present application and includes common knowledge or customary techniques in the art that are not disclosed in the present application. The specification and examples are intended to be exemplary only, and the true scope and spirit of the present application are indicated by the following claims.

[0095] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0096] The above description is only a preferred embodiment of the present application and is not intended to limit the present application. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present application shall be included in the scope of protection of the present application.

Claims

1. A resource audit evaluation method, characterized in that: The method comprises: Obtain audit data generated by users auditing resources; Based on the data of each dimension in the audit data, respectively obtain the management score of the user in the corresponding dimension; The assessment results used to characterize resource audit risks are obtained based on the management scores of each dimension.

2. The method according to claim 1, characterized in that The obtaining of audit data generated by a user auditing a resource includes: Obtain the operation management data generated by users auditing resources in the operation audit dimension; Obtain resource management data generated by users auditing resources in the resource management dimension; Obtain compliance management data generated by users auditing resources in the compliance management dimension.

3. The method according to claim 1 or 2, characterized in that: The obtaining of the management score of the user in the corresponding dimension based on each dimension data in the audit data includes: For each dimensional data, obtaining a weight corresponding to each sub-dimension included in the dimensional data; Based on the weights corresponding to the sub-dimensions and the parameters of the sub-dimensions in the dimensional data, the management score of the user in the dimension is determined.

4. The method according to claim 3, characterized in that The determining the management score of the user in the dimension based on the weight corresponding to each sub-dimension and the parameter of each sub-dimension in the dimensional data includes: The score of each sub-dimension is determined based on the parameters of each sub-dimension; The weight corresponding to each sub-dimension and the score of each sub-dimension are used to perform weighted summation to obtain the user's management score in the dimension.

5. The method according to claim 2, characterized in that: The operation management data includes at least one sub-dimension parameter of the activation status of the resource control event collection function, the activation status of the user's operation audit in the whole area, and the setting status of the resource control event retention time; The resource management data includes parameters of at least one sub-dimension of user resource stability and user resource idleness; The compliance management data includes at least one sub-dimension parameter of whether the user has enabled configuration auditing, the basic rules for configuration auditing enabled by the user, the response of non-compliant resources, the automatic correction of non-compliant resources, and the coverage of resource monitoring.

6. The method according to claim 1, characterized in that The assessment results used to characterize resource audit risks are obtained based on the management scores of various dimensions, including: Obtain the weight corresponding to each dimension, and perform weighted summation using the management score of each dimension and the weight corresponding to each dimension to obtain a comprehensive management score; Determine the risk level to which the comprehensive management points belong based on the preset risk classification information; The comprehensive management score and the risk level are used to generate an assessment result representing the resource audit risk.

7. The method according to any one of claims 1-2, 4-6, characterized in that: After obtaining an assessment result for characterizing resource audit risk according to the management scores of each dimension, the method further includes: An assessment result characterizing the audit risk of the resource is presented to the user.

8. A resource audit evaluation device, characterized in that: The device comprises: The data collection module is used to obtain the audit data generated by the user's audit of resources; A score calculation module, used to obtain the management score of the user in the corresponding dimension based on the data of each dimension in the audit data; The risk assessment module is used to obtain assessment results for characterizing resource audit risks based on the management scores of various dimensions.

9. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: The processor executes the program to implement the method according to any one of claims 1 to 7.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: The program is executed by a processor to implement the method according to any one of claims 1 to 7.

Images