Task execution condition acquisition method and related device

Abstract

The invention discloses a task execution condition obtaining unit and a related device, after safety management software issues a safety configuration task to a controlled terminal, first safety configuration information corresponding to the task after the task is successfully executed is obtained, and then an information collection task is issued for the task; and the server is used for acquiring related information updated after the plurality of controlled terminals execute tasks, then processing the related information to obtain second security configuration information corresponding to the controlled terminals, and then, according to a comparison result of the first security configuration information and the second security configuration information, sending the second security configuration information to the controlled terminals. According to the method, the first controlled terminal for successfully executing the task and the second controlled terminal for not successfully executing the task are determined, so that the security management software does not repeatedly issue the task to the successfully executed first controlled terminal after knowing the task execution condition of each controlled terminal, the resource consumption and the network burden of the first controlled terminal are reduced, and the user experience is improved. Therefore, the security management efficiency of the security management software on the controlled terminal is effectively improved.

Description

Technical Field

[0001] The present application relates to the field of information technology, and in particular to a method for acquiring task execution status and a related device. Background Art

[0002] In order to ensure the information security in the network, terminal security management software is usually required to perform security management on terminal devices.

[0003] In related technologies, terminal security management software mainly sends security policies or tasks through policy push. After receiving the security policies or tasks, the terminal devices will perform corresponding security configurations according to the requirements of the policies or tasks to achieve management and protection of related resources or data.

[0004] However, since different terminal devices perform tasks in different environments, there is no unified standard for their status after performing tasks, which makes it difficult for terminal security management software to obtain the task execution status of the terminal device. Summary of the invention

[0005] In view of this, the present application provides a method and related device for obtaining task execution status, establishes security configuration information for security management tasks, and issues information collection tasks, collects and processes relevant information after different controlled terminals execute tasks, and obtains second security configuration information corresponding to different controlled terminals, and then determines whether the corresponding controlled terminal has completed the security management task based on the consistency comparison between the second security configuration information and the first security configuration information, so that the security management software can obtain the task execution status of different controlled terminals.

[0006] To solve the above problems, the technical solutions provided by this application are as follows:

[0007] On the one hand, the present application provides a method for obtaining task execution status, the method comprising:

[0008] In response to receiving a security configuration task, generating a task baseline, the security configuration task has been issued to M controlled terminals, the security configuration task is used to instruct the controlled terminals to update security configuration information, and the task baseline is used to identify first security configuration information corresponding to the terminal device after successfully executing the security configuration task;

[0009] Sending an information collection task for the security configuration task to the M controlled terminals, and obtaining the to-be-identified information related to the security configuration task uploaded by the M controlled terminals respectively;

[0010] Processing the information to be identified to obtain second security configuration information corresponding to the M controlled terminals respectively;

[0011] According to the consistency verification result of the first security configuration information identified by the task baseline and the second security configuration information corresponding to the M controlled terminals respectively, the first terminal that successfully executes the security configuration task and the second terminal that fails to execute the security configuration task are determined from the M controlled terminals.

[0012] In a possible implementation, the processing of the information to be identified to obtain second security configuration information corresponding to the M controlled terminals respectively includes:

[0013] Fitting the information to be identified of the M controlled terminals by a clustering algorithm to obtain clusters, wherein the clusters are used to identify the information to be identified of the same data type;

[0014] The information to be identified is processed according to a processing strategy corresponding to the cluster, and the second security configuration information corresponding to each of the M controlled terminals is determined.

[0015] In a possible implementation, fitting the to-be-identified information of the M controlled terminals by using a clustering algorithm to obtain clusters includes:

[0016] Determine N cluster centers, where the N cluster centers are used to identify standard information of different data types corresponding to the terminal device after executing the security configuration task;

[0017] According to the similarity between the information to be identified and the N cluster centers, the information to be identified is divided into different clusters.

[0018] In a possible implementation manner, after determining the N cluster centers, the method further includes:

[0019] Determine the processing strategies corresponding to the N cluster centers respectively;

[0020] The processing strategies corresponding to the N cluster centers are used as the processing strategies corresponding to the cluster clusters corresponding to the N cluster centers.

[0021] In a possible implementation manner, after sending the information collection task for the security configuration task to the M controlled terminals, the method further includes:

[0022] Create event triggers;

[0023] In response to obtaining the second security configuration information having the security configuration task identifier, a consistency check result is obtained by comparing the first security configuration information with the second security configuration information.

[0024] In a possible implementation, the security configuration task includes:

[0025] Version upgrade tasks or script configuration tasks.

[0026] On the other hand, the present application provides a device for acquiring task execution status, the device comprising a generating unit, an acquiring unit, a processing unit and a determining unit:

[0027] The generating unit is used to generate a task baseline in response to receiving a security configuration task, the security configuration task has been issued to M controlled terminals, the security configuration task is used to instruct the controlled terminals to update security configuration information, and the task baseline is used to identify the first security configuration information corresponding to the terminal device after successfully executing the security configuration task;

[0028] The acquisition unit is used to send an information collection task for the security configuration task to the M controlled terminals, and acquire the to-be-identified information related to the security configuration task uploaded by the M controlled terminals respectively;

[0029] The processing unit is used to process the information to be identified to obtain second security configuration information corresponding to the M controlled terminals respectively;

[0030] The determination unit is used to determine a first terminal that successfully executes the security configuration task and a second terminal that fails to successfully execute the security configuration task from the M controlled terminals based on a consistency verification result of the first security configuration information identified by the task baseline and the second security configuration information respectively corresponding to the M controlled terminals.

[0031] In a possible implementation manner, the processing unit is specifically configured to:

[0032] Fitting the information to be identified of the M controlled terminals by a clustering algorithm to obtain clusters, wherein the clusters are used to identify the information to be identified of the same data type;

[0033] The information to be identified is processed according to a processing strategy corresponding to the cluster, and the second security configuration information corresponding to each of the M controlled terminals is determined.

[0034] In a possible implementation manner, the processing unit is specifically configured to:

[0035] Determine N cluster centers, where the N cluster centers are used to identify standard information of different data types corresponding to the terminal device after executing the security configuration task;

[0036] According to the similarity between the information to be identified and the N cluster centers, the information to be identified is divided into different clusters.

[0037] In a possible implementation manner, the processing unit is specifically configured to:

[0038] Determine the processing strategies corresponding to the N cluster centers respectively;

[0039] The processing strategies corresponding to the N cluster centers are used as the processing strategies corresponding to the cluster clusters corresponding to the N cluster centers.

[0040] In a possible implementation, the device further includes an establishing unit and a comparing unit:

[0041] The establishing unit is used to establish an event trigger;

[0042] The comparison unit is used for, in response to obtaining the second security configuration information having the security configuration task identifier, performing a comparison between the first security configuration information and the second security configuration information to obtain a consistency verification result.

[0043] In a possible implementation, the security configuration task includes:

[0044] Version upgrade tasks or script configuration tasks.

[0045] In another aspect, the present application provides a computer device, the computer device comprising a processor and a memory:

[0046] The memory is used to store computer programs;

[0047] The processor is configured to execute the method according to the computer program.

[0048] In yet another aspect, the present application provides a computer-readable medium for storing a computer program, wherein the computer program implements the method when executed by a computer device.

[0049] In yet another aspect, the present application provides a computer program product comprising a computer program, which, when executed on a computer device, enables the computer device to perform the method.

[0050] It can be seen that this application has the following beneficial effects:

[0051] The present application provides a method for obtaining the execution status of a task. After the security management software issues a security configuration task to a controlled terminal, the first security configuration information corresponding to the terminal device after the terminal device successfully executes the security configuration task is determined, and then an information collection task is sent to the controlled terminal for the security configuration task to obtain the relevant information updated after the controlled terminal executes the security configuration task, and then the relevant information is processed to obtain the second security configuration information corresponding to the controlled terminal, and finally the second security configuration information corresponding to the controlled terminal is compared with the first security configuration information to determine the first terminal that successfully completes the security configuration task and the second terminal that fails to successfully complete the security configuration task. In this way, the security management software can know the execution of the task by different controlled terminals after the security configuration task is issued, and determine the first controlled terminal that successfully completes the task and the second controlled terminal that fails to successfully complete the task. After knowing that the first controlled terminal successfully executes the task, the task will no longer be repeatedly issued to it, avoiding repeated execution of the task by the controlled terminal, reducing the resource consumption and network burden of the first controlled terminal, and effectively improving the efficiency of the security management software in security management of the controlled terminal. BRIEF DESCRIPTION OF THE DRAWINGS

[0052] Figure 1 A flowchart of a method for issuing a security configuration task provided in an embodiment of the present application;

[0053] Figure 2 A flowchart of a method for obtaining task execution status provided in an embodiment of the present application;

[0054] Figure 3 A schematic diagram of a method for obtaining the task execution status of a version upgrade task provided in an embodiment of the present application;

[0055] Figure 4 A diagram of a device for obtaining task execution status provided in an embodiment of the present application. DETAILED DESCRIPTION

[0056] In order to enable those skilled in the art to better understand the solution of the present application, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0057] As described in the background technology, in the related technology, security management software mainly executes security configuration tasks by policy push. After these software issues the policies and related tasks of security configuration tasks, due to performance and technical reasons, in many cases, they will not collect information on the execution of policies or tasks, but use multiple rounds of policy push to try to ensure the successful execution of policies or tasks. This approach not only consumes a lot of resources and causes network congestion in the internal LAN, but also makes it impossible to accurately understand the execution of security configuration tasks.

[0058] For example, see Figure 1 , which is a flow chart of a method for issuing security configuration tasks. After the terminal security software 1 completes the policy or task issuance, the controlled terminal completes the task execution. However, since the terminal security software cannot obtain the corresponding execution information, it can only repeat the issuance of commands regularly to ensure the complete execution of the task.

[0059] Therefore, the present application provides a method for obtaining the execution status of a task. After the security management software sends a security configuration task to the controlled terminal, an information collection task is sent to the controlled terminal for the security configuration task to obtain relevant information updated after the controlled terminal executes the security configuration task. The relevant information is then processed and compared with the information after the security configuration task is successfully executed. If the information is consistent, it is determined that the controlled terminal has successfully executed the security configuration task, so that the task is no longer sent to it repeatedly, thereby avoiding repeated execution of the task by the controlled terminal, reducing the resource consumption and network burden of the first controlled terminal, and effectively improving the efficiency of the security management software for the controlled terminal.

[0060] See also Figure 2 As shown, it is a flowchart of a method for obtaining task execution status provided in an embodiment of the present application. In this embodiment, it can be executed by a computer device as an example.

[0061] S101: In response to receiving a security configuration task, generate a task baseline.

[0062] Security configuration tasks refer to the relevant policies or tasks issued by security management software when performing security management on terminal devices. Among them, policies refer to the goals or action plans issued by security management software for a certain type of security management tasks, and tasks refer to the specific activities and operations that need to be performed in order to achieve security management goals, which is the specific implementation of policies.

[0063] When different types of security management software perform security management on terminal devices, the corresponding types of security management tasks are different, including anti-virus tasks, anti-intrusion tasks, network access detection tasks, anti-leakage tasks, etc. The security management software is deployed on the terminal device. After the security management software issues a security management task, the terminal device updates the security configuration information related to the task.

[0064] The task baseline is used to identify the first security configuration information corresponding to the terminal device after successfully executing the security configuration task. The first security configuration information is the status information of the relevant configuration. For example, for anti-virus tasks, including anti-virus software configuration, operating system configuration, and network security configuration, when the terminal device executes the anti-virus task, the information of the anti-virus software, operating system configuration, and network security configuration will be updated. The status information corresponding to the relevant configuration information after the task is successfully executed is the generated task baseline.

[0065] After receiving the security configuration task issued by the security management software deployed on the terminal device, the computer device can generate a task baseline for the security configuration information through the relevant security configuration information after the task is successfully executed according to the user's customized settings, or generate a task baseline by querying the corresponding security configuration standard information established based on experience.

[0066] S102: Sending an information collection task for the security configuration task to M controlled terminals, and obtaining to-be-identified information related to the security configuration task uploaded by the M controlled terminals respectively.

[0067] The controlled terminal is a terminal device that performs security configuration tasks. The information to be identified is the updated configuration information generated when the controlled terminal performs security configuration tasks, including log text information, configuration file information, and alarm information.

[0068] Security management software can issue security management tasks to multiple terminal devices at the same time. Since different controlled terminals perform security management tasks in different environments, security management tasks may be successfully or unsuccessfully executed. At this time, the information uploaded to the computer device by different controlled terminals is different.

[0069] The computer device issues an information collection task for the security configuration task, obtains the to-be-identified information configured related to the security configuration task in multiple controlled terminals, and is used to distinguish different task execution situations of the multiple controlled terminals.

[0070] S103: Process the information to be identified to obtain second security configuration information corresponding to the M controlled terminals respectively.

[0071] The second security configuration information is the status information of the relevant configuration when the controlled terminal executes the security management task. For example, for the above anti-virus task, when the controlled terminal executes the security task, a series of log texts and alarm information are generated. The computer device determines the status information of the relevant configuration after the corresponding controlled terminal executes the security configuration information based on the log texts and alarm information generated by different controlled terminals.

[0072] S104: According to the consistency verification result of the first security configuration information identified by the task baseline and the second security configuration information corresponding to the M controlled terminals respectively, determine the first terminal that successfully executes the security configuration task and the second terminal that fails to successfully execute the security configuration task from the M controlled terminals.

[0073] The consistency check result is used to determine whether the controlled terminal has achieved the expected success after executing the security configuration task. If the second security configuration information corresponding to the controlled terminal is consistent with the first security configuration information, the computer device determines that the controlled terminal has successfully executed the security configuration task and notifies the security management software not to repeatedly send the security configuration task to the controlled terminal.

[0074] If the second configuration information corresponding to the controlled terminal is inconsistent with the first security configuration information, the computer device determines that the controlled terminal has not successfully executed the security configuration task. At this time, there are many situations that lead to the failure of task execution, such as the inability to execute the task due to system environment problems, or the interruption of the execution process, etc. The security management software needs to repeatedly send the task to the controlled terminal to ensure that the controlled terminal can execute successfully.

[0075] Therefore, the security management software can know the execution of the task by different controlled terminals after the security configuration task is issued, and determine the first controlled terminal that successfully completed the task and the second controlled terminal that did not successfully complete the task. After knowing that the first controlled terminal successfully executed the task, the task will no longer be issued to it repeatedly, avoiding repeated execution of tasks by the controlled terminals, reducing the resource consumption and network burden of the first controlled terminal, and effectively improving the efficiency of the security management software for the controlled terminals.

[0076] Since the information to be identified is the updated configuration information generated when the controlled terminal performs the security configuration task, including multiple data forms such as log text information and alarm information, it is necessary to process the data in different forms separately. In a possible implementation, the information to be identified is processed to obtain the second security configuration information corresponding to M controlled terminals respectively, including:

[0077] The information to be identified of the M controlled terminals is fitted by a clustering algorithm to obtain a clustering cluster. The information to be identified is processed according to a processing strategy corresponding to the clustering cluster to determine the second security configuration information corresponding to the M controlled terminals respectively.

[0078] Clustering clusters are used to identify information to be identified of the same data type. Computer devices can use clustering algorithms to cluster information to be identified with the same data representation into one category. For example, there are three controlled terminals performing the security management task, the information to be identified of the first controlled terminal is log text information, and the information to be identified of the second and third controlled terminals are both alarm information. Then, after clustering, the computer device obtains two clusters in total. The first cluster includes the log text information corresponding to the first controlled terminal, and the second cluster includes the alarm information corresponding to the second controlled terminal and the third controlled terminal, respectively. Then, the computer device processes according to the processing strategy corresponding to the log text information, and can determine the second security configuration information corresponding to the first controlled terminal. It processes according to the processing strategy for the alarm information, and can determine the second security configuration information corresponding to the second controlled terminal and the third controlled terminal, respectively.

[0079] Corresponding processing is performed for information to be identified of different data types respectively. When the security configuration task needs to update relevant configuration information of multiple controlled terminals, the decision efficiency and accuracy of the corresponding second security configuration information can be effectively improved.

[0080] Due to the different execution environments of different controlled terminals, if the information to be identified corresponding to different operating systems has the same data representation, there may be certain deviations. In a possible implementation, the information to be identified of M controlled terminals is fitted by a clustering algorithm, and the clusters obtained include:

[0081] Determine N cluster centers;

[0082] According to the similarity between the information to be identified and N cluster centers, the information to be identified is divided into different clusters.

[0083] N cluster centers are used to identify standard information of different data types corresponding to the terminal device after executing the security configuration task. For example, after the controlled terminal executes the antivirus task, log text information and alarm information may be generated. The computer device comprehensively considers the deviation of the log text information caused by different operating systems, and fits a standard log text information after executing the task based on the log text information obtained under multiple operating systems, and uses it as a cluster center. Similarly, based on the alarm information obtained under multiple operating systems, a standard alarm information after executing the task is fitted, and then the similarities between the information to be identified corresponding to multiple controlled terminals and the standard log text information and the standard alarm information are calculated respectively, and the information to be identified is divided into the cluster corresponding to the cluster center with the highest similarity.

[0084] Therefore, by pre-fitting standard information of different data types, the information deviation caused by the use of different operating systems by terminal devices can be comprehensively considered, and the information to be identified of the same data type can be identified as the standard information for processing, thereby avoiding misjudgment of task execution due to information deviation.

[0085] When processing data of different data types, processing strategies corresponding to standard information should be used. In a possible implementation, after determining N cluster centers, the method further includes:

[0086] Determine the processing strategies corresponding to the N cluster centers;

[0087] The processing strategies corresponding to the N cluster centers are used as the processing strategies corresponding to the cluster clusters corresponding to the N cluster centers.

[0088] After fitting the standard log text information and standard alarm information after executing the task, the computer device determines the corresponding processing strategies to process the information to obtain the corresponding second security configuration information. Due to the diversity of operating systems, the log text information in the clustering cluster of log text information is similar but not completely consistent. The computer device processes the processing strategy corresponding to the standard log text information as the processing strategy for each log text information.

[0089] Therefore, uniformly defining the processing rules for all members in the cluster can effectively improve the consistency of security configuration information, reduce anomalies or deviations caused by differences in operating systems, and thus improve the accuracy of the acquired task execution status.

[0090] Since there are many types of security management, when obtaining the execution status of the corresponding security management task, it is necessary to obtain the security configuration information related to the security management task to avoid interference from other configuration information. In a possible implementation, after sending the information collection task for the security configuration task to the M controlled terminals, the method further includes:

[0091] Create event triggers;

[0092] In response to obtaining the second security configuration information having the security configuration task identifier, a consistency check result is obtained by comparing the first security configuration information with the second security configuration information.

[0093] When the security management software sends multiple security management tasks to the controlled terminal at the same time, the computer device can simultaneously obtain information related to the multiple security management tasks, and the relevance of the information to the security configuration tasks can be determined based on the identifier.

[0094] After issuing the information collection task, the computer device can establish an event trigger for the security management task. After obtaining the security configuration information with the security management task identifier, the first security configuration information is compared with the second security configuration information to obtain a consistency verification result of whether the information is consistent or inconsistent.

[0095] Therefore, through event triggers, the correct interaction of information can be ensured, and consistency comparison can be performed when information related to the security management task is obtained, which effectively improves the efficiency of information comparison and thus improves the management capabilities of the security management software.

[0096] In a possible implementation manner, the security configuration task includes: a version upgrade task or a script configuration task.

[0097] A version upgrade task is an update operation performed in software or systems to upgrade the current version of a program, application, or platform to a new version. A script configuration task is a task that automates system configuration, software installation, configuration management, or other operations by writing and executing scripts.

[0098] The security management software can promptly repair system vulnerabilities and achieve the purpose of security management of controlled terminals by issuing version upgrade tasks or script upgrade tasks.

[0099] See also Figure 3 , is a schematic diagram of a method for obtaining the task execution status of a version upgrade task provided by an embodiment of the present application, the method is implemented by establishing a system for information collection, the system can be independent of various types of security management software, collect and process the execution information after the controlled terminal executes the security management task. The specific execution process is as follows:

[0100] A1. Generate task baseline: When the security management software issues a version upgrade task, establish a task baseline to identify the status information of the relevant configuration of the controlled terminal after completing the corresponding task, such as upgrading the security management software to version 2.

[0101] A2. Sending a collection task: According to the established task baseline, an information collection task is sent to the controlled terminal to obtain the current status information of the controlled terminal. After sending an information collection task, the system registers an asynchronous event trigger for the information collection task, waiting for the controlled terminal to complete the task and upload the information.

[0102] A3. Execute the collection task: After the controlled terminal completes the security management task, first detect the local version information of the controlled terminal. For example, if the version of the security management software is version 1, then upload the configuration information corresponding to version 1 to the system.

[0103] A4. Clustering model fitting: After the controlled terminal completes the task, it transmits the configuration information to the system. The system fits the collected information into standard information of a certain data type according to the clustering algorithm. The standard information is pre-planned and formulated according to the data type of the configuration information related to the security management task.

[0104] A5. Obtain fitting results: Process the standard information according to the processing strategy corresponding to the preset standard information to determine the security configuration information corresponding to the controlled terminal.

[0105] A6. Consistency comparison: Compare the security configuration information with the task baseline. If the comparison result is consistent, the controlled terminal is marked as having completed the security management task. Otherwise, the controlled terminal is marked as having failed to complete the security management task.

[0106] A7. Targeted distribution: After the system determines the execution of the task by each controlled terminal, the security management software repeatedly distributes the task to the controlled terminals that have not been successfully executed.

[0107] Based on the method for obtaining the task execution status provided in the above embodiments, the embodiment of the present application further provides a device for obtaining the task execution status, which is described in detail below in conjunction with the accompanying drawings.

[0108] See also Figure 4 , is a device for obtaining task execution status provided by the present application, the device 400 includes a generating unit 401, an obtaining unit 402, a processing unit 403 and a determining unit 404:

[0109] The generating unit 401 is used to generate a task baseline in response to receiving a security configuration task, the security configuration task has been issued to M controlled terminals, the security configuration task is used to instruct the controlled terminals to update security configuration information, and the task baseline is used to identify the first security configuration information corresponding to the terminal device after successfully executing the security configuration task;

[0110] The acquisition unit 402 is used to send an information collection task for the security configuration task to the M controlled terminals, and acquire the to-be-identified information related to the security configuration task uploaded by the M controlled terminals respectively;

[0111] The processing unit 403 is used to process the information to be identified to obtain the second security configuration information corresponding to the M controlled terminals respectively;

[0112] The determination unit 404 is used to determine, from the M controlled terminals, a first terminal that successfully executes the security configuration task and a second terminal that fails to successfully execute the security configuration task based on a consistency verification result of the first security configuration information identified by the task baseline and the second security configuration information respectively corresponding to the M controlled terminals.

[0113] Therefore, the security management software can know the execution of the task by different controlled terminals after the security configuration task is issued, and determine the first controlled terminal that successfully completed the task and the second controlled terminal that did not successfully complete the task. After knowing that the first controlled terminal successfully executed the task, the task will no longer be issued to it repeatedly, avoiding repeated execution of tasks by the controlled terminals, reducing the resource consumption and network burden of the first controlled terminal, and effectively improving the efficiency of the security management software for the controlled terminals.

[0114] In a possible implementation manner, the processing unit is specifically configured to:

[0115] Fitting the information to be identified of the M controlled terminals by a clustering algorithm to obtain clusters, wherein the clusters are used to identify the information to be identified of the same data type;

[0116] The information to be identified is processed according to a processing strategy corresponding to the cluster, and the second security configuration information corresponding to each of the M controlled terminals is determined.

[0117] Corresponding processing is performed for information to be identified of different data types respectively. When the security configuration task needs to update relevant configuration information of multiple controlled terminals, the decision efficiency and accuracy of the corresponding second security configuration information can be effectively improved.

[0118] In a possible implementation manner, the processing unit is specifically configured to:

[0119] Determine N cluster centers, where the N cluster centers are used to identify standard information of different data types corresponding to the terminal device after executing the security configuration task;

[0120] According to the similarity between the information to be identified and the N cluster centers, the information to be identified is divided into different clusters.

[0121] Therefore, by pre-fitting standard information of different data types, the information deviation caused by the use of different operating systems by terminal devices can be comprehensively considered, and the information to be identified of the same data type can be identified as the standard information for processing, thereby avoiding misjudgment of task execution due to information deviation.

[0122] In a possible implementation manner, the processing unit is specifically configured to:

[0123] Determine the processing strategies corresponding to the N cluster centers respectively;

[0124] The processing strategies corresponding to the N cluster centers are used as the processing strategies corresponding to the cluster clusters corresponding to the N cluster centers.

[0125] Therefore, uniformly defining the processing rules for all members in the cluster can effectively improve the consistency of security configuration information, reduce anomalies or deviations caused by differences in operating systems, and thus improve the accuracy of the acquired task execution status.

[0126] In a possible implementation, the device further includes an establishing unit and a comparing unit:

[0127] The establishing unit is used to establish an event trigger;

[0128] The comparison unit is used for, in response to obtaining the second security configuration information having the security configuration task identifier, performing a comparison between the first security configuration information and the second security configuration information to obtain a consistency verification result.

[0129] Therefore, through event triggers, the correct interaction of information can be ensured, and consistency comparison can be performed when information related to the security management task is obtained, which effectively improves the efficiency of information comparison and thus improves the management capabilities of the security management software.

[0130] In a possible implementation, the security configuration task includes:

[0131] Version upgrade tasks or script configuration tasks.

[0132] The security management software can promptly repair system vulnerabilities and achieve the purpose of security management of controlled terminals by issuing version upgrade tasks or script upgrade tasks.

[0133] Based on the above embodiments, an embodiment of the present application provides a computer device, including:

[0134] Memory for storing computer programs;

[0135] A processor is used to implement the steps of the method for obtaining the task execution status as described above when executing the computer program.

[0136] On the basis of the above-mentioned embodiments, the embodiments of the present application further provide a computer-readable medium, on which a computer program is stored, and when the computer program is processed and executed, the steps of the method for obtaining the task execution status as described above are implemented.

[0137] On the basis of the above-mentioned embodiments, the embodiments of the present application further provide a computer program product including a computer program, which, when executed on a computer device, enables the computer device to execute the steps of the method for obtaining the task execution status.

[0138] It should be noted that the various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments, and the same or similar parts between the various embodiments can be referred to each other. For the system or device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and the relevant parts can be referred to the method part description.

[0139] The above description of the disclosed embodiments enables those skilled in the art to implement or use the present application. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present application. Therefore, the present application will not be limited to the embodiments shown herein, but will conform to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A method for obtaining task execution status, characterized in that: The method comprises: In response to receiving a security configuration task, generating a task baseline, the security configuration task has been issued to M controlled terminals, the security configuration task is used to instruct the controlled terminals to update security configuration information, and the task baseline is used to identify first security configuration information corresponding to the terminal device after successfully executing the security configuration task; Sending an information collection task for the security configuration task to the M controlled terminals, and obtaining the to-be-identified information related to the security configuration task uploaded by the M controlled terminals respectively; Processing the information to be identified to obtain second security configuration information corresponding to the M controlled terminals respectively; According to the consistency verification result of the first security configuration information identified by the task baseline and the second security configuration information corresponding to the M controlled terminals respectively, the first terminal that successfully executes the security configuration task and the second terminal that fails to execute the security configuration task are determined from the M controlled terminals.

2. The method according to claim 1, characterized in that The processing of the information to be identified to obtain second security configuration information corresponding to the M controlled terminals respectively includes: Fitting the information to be identified of the M controlled terminals by a clustering algorithm to obtain clusters, wherein the clusters are used to identify the information to be identified of the same data type; The information to be identified is processed according to a processing strategy corresponding to the cluster, and the second security configuration information corresponding to each of the M controlled terminals is determined.

3. The method according to claim 2, characterized in that The clustering algorithm is used to fit the information to be identified of the M controlled terminals to obtain clusters, including: Determine N cluster centers, where the N cluster centers are used to identify standard information of different data types corresponding to the terminal device after executing the security configuration task; According to the similarity between the information to be identified and the N cluster centers, the information to be identified is divided into different clusters.

4. The method according to claim 3, characterized in that After determining the N cluster centers, the method further includes: Determine the processing strategies corresponding to the N cluster centers respectively; The processing strategies corresponding to the N cluster centers are used as the processing strategies corresponding to the cluster clusters corresponding to the N cluster centers.

5. The method according to claim 1, characterized in that: After sending the information collection task for the security configuration task to the M controlled terminals, the method further includes: Create event triggers; In response to obtaining the second security configuration information having the security configuration task identifier, a consistency check result is obtained by comparing the first security configuration information with the second security configuration information.

6. The method according to claim 1, characterized in that The security configuration tasks include: Version upgrade tasks or script configuration tasks.

7. A device for obtaining task execution status, characterized in that: The device comprises a generating unit, an acquiring unit, a processing unit and a determining unit: The generating unit is used to generate a task baseline in response to receiving a security configuration task, the security configuration task has been issued to M controlled terminals, the security configuration task is used to instruct the controlled terminals to update security configuration information, and the task baseline is used to identify the first security configuration information corresponding to the terminal device after successfully executing the security configuration task; The acquisition unit is used to send an information collection task for the security configuration task to the M controlled terminals, and acquire the to-be-identified information related to the security configuration task uploaded by the M controlled terminals respectively; The processing unit is used to process the information to be identified to obtain second security configuration information corresponding to the M controlled terminals respectively; The determination unit is used to determine a first terminal that successfully executes the security configuration task and a second terminal that fails to successfully execute the security configuration task from the M controlled terminals based on a consistency verification result of the first security configuration information identified by the task baseline and the second security configuration information respectively corresponding to the M controlled terminals.

8. A computer device, characterized in that: The computer device comprises a processor and a memory: The memory is used to store computer programs; The processor is configured to execute the method according to any one of claims 1 to 6 according to the computer program.

9. A computer-readable medium, characterized in that The computer-readable medium is used to store a computer program, and when the computer program is executed by a computer device, the method according to any one of claims 1 to 6 is implemented.

10. A computer program product comprising a computer program, characterized in that When the method is executed on a computer device, the computer device is enabled to execute the method according to any one of claims 1 to 6.

Images