Safety monitoring method and system

Abstract

The invention provides a safety monitoring method and system. The method comprises the following steps of: sending safety monitoring information to a service terminal by a checking and monitoring center, wherein the safety monitoring information comprises a preset monitored page and a monitoring mode; generating behavior logs corresponding to the monitored page by the service terminal according to the safety monitoring information; and uploading all the behavior logs to the checking and monitoring center. In the embodiments of the invention, services are counted in batches and recorded in the forms of logs through the service terminal according to the safety monitoring information, thereby sensitive information of the page is effectively extracted, the requirement of afterwards tracing can be met, the quality of safety monitoring is improved conveniently, and the safety monitoring efficiency is further improved.

Description

technical field [0001] The invention relates to the field of business support, in particular to a safety monitoring method and system. Background technique [0002] Business support system (BOSS), business analysis system, etc. are the core support systems of the mobile business, covering functions such as billing, settlement, business, accounting, and customer service, and centralize sensitive data such as customer personal information and core business data. The security of these data directly affects the benefit and reputation of the enterprise. At present, the operation, acquisition and display of these data are mainly carried out through the pages of its business system. Therefore, page operations have a great risk of leakage and become a key control point to ensure the security of sensitive data. However, incidents of leakage of customer personal information and business operation data occur from time to time, and are becoming more and more serious. [0003] There ar...

AI Technical Summary

Problems solved by technology

[0005] (1) The network bypass interception technology can only check the maintenance operations of a few hosts using open protocols such as telnet and ftp. Even if some systems can record the entire page according to the HTTP protocol, they cannot effectively extract The sensitive information on the page makes it impossible to effectively verify the operation of the BOSS front page

[0006] (2) The log module embedded in the business system only records the operator, operation time, and query operations such as customer details, user information, and payment for each operation. It does not record access to sensitive data, which cannot meet the needs of subsequent investigations. Verification analysis of sensitive data

[0007] (3) Most business systems lack security audit functions

Images