erp product safety protection device and method

Abstract

The invention discloses an ERP (enterprise resource planning) product security protection apparatus and method. The ERP product security protection apparatus comprises a registration file generating and importing apparatus, an EPR system starting detection apparatus, and an EPR system real-time monitoring apparatus, wherein the registration file generating and importing apparatus is used for generating registration files, and importing the registration files into a system; the EPR system starting detection apparatus is used for scanning and detecting before a system code is loaded by a protection system, reading in the registration files firstly, putting the registration information in the registration files into a buffer memory, calculating the path of the monitored system files, comparing the product files loaded by the system with the registration information to obtain a file change result; and the EPR system real-time monitoring apparatus is used for reading in the registration files firstly, calculating the path of the monitored folder according to the configuration information of the registration files, setting the monitored folder, and triggering an event for processing the files in case of detecting file changes in the monitored folder. The advantage of ensuring the safe and stable running of the system is realized according to the ERP product security protection apparatus and method.

Description

technical field [0001] The invention relates to the field of computer technology, in particular to an ERP product safety protection device and method. Background technique [0002] ERP (ERP system is the abbreviation of Enterprise Resource Planning (Enterprise Resource Planning), refers to the management platform based on information technology, with systematic management ideas, providing decision-making and operation means for enterprise decision-makers and employees) product files are not Tampering is an important guarantee for the stable operation of ERP products. However, due to the current lack of protection for important files in ERP products, ERP product files can be overwritten at will, resulting in hidden dangers in product operation security, mainly in the following areas: [0003] 1. ERP product patch (ERP product patch: a file that can correct product code errors for ERP products) lack of installation control: There are many ways to generate ERP product patches, ...

AI Technical Summary

Problems solved by technology

During the installation, due to the many installation methods, it is impossible to conduct standardized review and conflict detection on the ERP product patches, causing the mutual influence and coverage of the patches to occur from time to time

[0004] 2. Unauthorized modification files are loaded: important product files are tampered with or replaced, and the modified files can also be loaded due to the lack of effective detection methods in the system

) class loader, so that unencrypted class files cannot be loaded by the class loader

Moreover, many large-scale software such as ERP use third-party middleware for class loading. If the class loader of third-party software is modified, it will bring risks to the safety and stability of the system.

Moreover, the loading of important files in the system includes not only code files, but also many configuration and authorization files. The modification of simple class loaders cannot meet the needs of such files.

[0005] 3. The supervision of important files is lagging behind: There is no necessary supervision and backup of important files in ERP products, coupled with the chaotic management of some customers, irregular installation of product patch files, etc., once important files are modified or deleted by mistake, it is difficult to find and repair them in time

[0006] 4. System administrators cannot monitor system changes in real time: At present, there are problems in the operation of ERP products, especially sudden problems, many of which are caused by the modification or replacement of ERP product files

Due to the lack of system monitoring tools, system administrators cannot timely and accurately understand system changes, which brings difficulties to problem location and processing

[0007] 5. The system lacks an automatic backup and recovery mechanism: the backup code can only be manually backed up by the system administrator, which takes a long time to operate, occupies customer system resources, and is not convenient for customers to manage the code

Once a problem occurs, it is difficult to locate the specific restored directory

For unauthorized modification of important files, it is basically impossible to recover

[0008] 6. Lack of control over the operation rights of ERP system administrators: system administrators often have the highest authority over the system. It can be said that every operation of ERP system administrators may affect the operation safety of ERP products

Due to the uneven technical level of ERP system management personnel, system operation failures caused by irregular operations occur from time to time

Images