Host Security Policy Grouping for Dynamic Host Reassignment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing host security policy configurations face challenges in scenarios with a large number of hosts or frequent adjustments, as level-1 grouping is not applicable and static multi-level grouping leads to high operation complexity.
Innovation Solution
A method and apparatus for host security policy configuration that displays a multi-level grouping structure, allowing hosts to be moved into a preset 'ungrouped' level upon deletion, changing security policies accordingly, and enabling flexible management of host groupings.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If static multi-level grouping is used for host security policy configuration, then grouping management capability is improved, but operation complexity increases significantly when hosts are frequently adjusted
Solution Approach 1:
The patent implements dynamic multi-level grouping that automatically adjusts when hosts are added or removed. The system dynamically updates grouping structures and security policy bindings without requiring manual reconfiguration, transforming the static grouping model into an adaptive system that responds automatically to host changes.
Solution Approach 2:
The patent pre-establishes multiple levels of grouping structures and security policy bindings in advance. When hosts are frequently adjusted, the pre-configured grouping framework is already in place to accommodate changes, reducing the operational complexity of managing security policies during dynamic host adjustments.
2Ease of operation
If level-1 grouping is used for security policy configuration, then operation simplicity is maintained, but it becomes inapplicable when the number of hosts increases significantly
Solution Approach 1:
The patent segments the host population into multiple hierarchical grouping levels (e.g., region-level, department-level, project-level groupings). This segmentation allows security policies to be configured at appropriate granularities for different scales, maintaining operational simplicity while accommodating large numbers of hosts through structured division.
Solution Approach 2:
The patent introduces additional organizational dimensions beyond simple level-1 grouping by creating multi-level hierarchical structures. Hosts can be organized across multiple dimensions (geographic, functional, project-based), enabling the system to handle large host scales while maintaining configuration simplicity through dimensional organization.
Data Source
AI summary
The present disclosure relates to a host security policy configuration method, an electronic device, and a computer-readable medium. The method includes: displaying a host management page in response to a trigger operation on the host management page, where the host management page displays a multi-level grouping for grouping management on hosts; and in response to a delete operation for a first grouping in the multi-level grouping, moving at least one first host comprised in the first grouping into a preset grouping at an equal level, changing a security policy corresponding to the at least one first host to a security policy corresponding to the preset grouping, and deleting the first grouping, where the preset grouping is used for recording an ungrouped host.