7 results about "Jump server" patented technology

The application provides a non-containerized service operation and maintenance method based on a different network environment of a jump machine, the method comprising: creating a login account of a code hosting tool, setting corresponding permissions therefor, and pushing the code of a business system to the login account as needed; the non-containerized service operation and maintenance method based on the different network environment of the jump machine provides a visual interface for the pushed code in environment 1, and compiles and packages the code after selection according to actual needs; and the application provides a method for realizing non-containerized front-end and back-end engineering service operation and maintenance by taking the jump machine as a transfer station and integrating deployment and operation and maintenance work in two different network environments while indirectly connecting the two different network environments.

This invention provides a method and apparatus for asset detection at the attack end. The method includes: acquiring the attack end's preference rules for the jump servers based on intelligence data of known jump servers; determining the content management system (CMS) used by the known jump servers; searching for addresses that use the same CMS as the known jump servers and forming an address set; actively probing each address in the address set, and identifying the assets corresponding to addresses that satisfy the preference rules as assets of the attack end. This solution can proactively discover more assets used by the attack end during the attack phase, which is beneficial for the production of threat intelligence by the attack end.

The invention provides a high-performance cluster user isolation and task scheduling method and system based on a shared account, and the method comprises the steps: configuring a springboard machine with a management authority, and connecting the springboard machine with a high-performance cluster; creating a corresponding independent account number for each user on the springboard machine, and associating the independent account number with a shared account number of the high-performance cluster through a secret key; setting access permissions of the independent accounts, and performing task scheduling and job submission with each independent account through the shared account; and controlling the job submission amount of each independent account according to the resource occupation amount. Under the condition that a shared account mechanism is adopted in a high-performance computing environment, user isolation and job control can be realized without system permission, directory-level data access isolation and job identity tag injection are realized for a plurality of users sharing accounts, a scheduler is supported to identify user ownership, and the operation efficiency is improved. User-level job quota control and resource use limitation are supported, and the security, controllability and resource utilization efficiency in a multi-user cluster scene are improved.

The invention provides an optimization method and device for memory overflow of a springboard machine, equipment and a medium, the springboard machine comprises two TCP connections for parallel data copying, and the optimization method comprises the following steps: establishing an observer monitoring mechanism between the two TCP connections for parallel data copying; the observer monitors a data reading event of two TCP connections; when it is detected that connection of any end completes data transmission, the observer enters a warning state; and in the warning state, if the surviving TCP connection does not read the data within the preset timeout time, the observer actively closes the corresponding two TCP connections, and the idle connection is timely closed through a monitoring mechanism, so that the connection resource accumulation is prevented, the normal operation of the springboard machine on the server is ensured, and the user experience feeling is good.

This invention provides an information technology-side network security system suitable for the complex network environment of new energy power plants. The network security system is divided into an isolation zone and an information technology zone, and firewalls are set up at the communication boundaries of each zone. The network security structure includes software and hardware devices such as application control, antivirus, patch management, device control, integrity control, system backup and recovery, security events and event management, network monitor, jump server, firewall, and network attached storage. It meets the basic functions of network security protection with minimal software and hardware configuration, effectively avoids network intrusion, hacker theft, data leakage and other problems, and has low construction cost, making it suitable for new energy power plants.

By properly managing the access routes from user terminals to the database, the risk of information leakage can be reduced. [Solution] The cloud system is connected to an administrator terminal 20 operated by an administrator and a user terminal 30 operated by a user. The cloud system includes a database 11 that stores specific data containing specific information and non-specific data that does not contain specific information, an access management unit 13 that assigns a dedicated role to users designated by the administrator for accessing specific data, a specific operational jump server 16 to which the user terminal 30(a) of a user with a dedicated role is connected and which is permitted to access both specific and non-specific data, and a normal operational jump server 17 to which the user terminal 30(b) of a user without a dedicated role is connected and which is permitted to access only non-specific data.

The present disclosure provides a game server updating method and device and a storage medium, and relates to the technical field of computers. A message interaction component generated based on user demand is acquired; a user operation on the message interaction component is received to generate a server updating command; a Jenkins task is created through a task robot according to the server updating command; an updating script is called according to parameter data of the message interaction component; the updating script is executed through the Jenkins task, and an updating file is uploaded to a jump machine, so that the jump machine uploads the updating file to an Erlang game server, and the Erlang game server is updated according to the updating file, wherein a trust relationship is established in advance between the jump machine and the Erlang game server; and the updating progress of the Erlang game server is sent to a webhook address through the updating script, wherein the webhook address is generated by the task robot, and the webhook address is pre-configured in the updating script. The game server is automatically hot-updated, the operation time of updating is saved, the labor cost is reduced, and the updating efficiency is improved.