An information security comprehensive audit system and method

Abstract

The invention discloses an information security comprehensive audit system and method. The system comprises a remote desktop proxy module, a monitoring and auditing module and a remote desktop video playback module, wherein the remote desktop proxy module is used for receiving a request from a remote desktop proxy client, authenticating identity of a remote desktop proxy request, realizing data exchange between the remote desktop proxy client and the remote desktop proxy server and recording session content; the monitoring and auditing module is used for providing an interface for querying historical records and performing data statistics and recording graphic operation of a server in a video mode; and the remote desktop video playback module is used for playing back the graphic operation at the server recorded by the monitoring and auditing module. Since the information security comprehensive audit system in the embodiment is allocated in a computer in a network without installing a specific audit engine at the server, the allocation task is simplified. In addition, occupancy of system resource at the server is avoided.

Description

technical field [0001] The invention relates to the field of security access, in particular to an information security comprehensive audit system and method. Background technique [0002] In the enterprise, remote desktop access is the most commonly used remote access method, which allows users to remotely operate the server computer in real time through the client computer, including installing software on the server computer, running programs, etc., everything It seems to be operating directly on the server-side computer. At present, the main access methods of remote desktop include the following three types: [0003] Windows-based remote desktop (RDP), open-source virtual network connection (VNC), and Linux / UNIX-based graphical access protocol (X11). [0004] Remote desktop access brings great convenience to remote office and remote maintenance, but it also brings a series of security problems. Remote operations performed by RDP, VNC, and X11 may cause resource informa...

AI Technical Summary

Problems solved by technology

[0007] First of all, due to the need to deploy a specific audit engine on all managed server computers, deployment will bring a huge workload when the number of target computers is large

[0008] In addition, since the operation of the audit engine will occupy certain system resources, it may affect the normal operation of the server computer system when it is deployed on a server computer with a high load.

Images