Method and system for managing user-defined script type baseline items
A management system and management method technology, applied to the management method and system of custom script type baseline projects, security baseline usage scenarios and its implementation fields, can solve the lack of flexibility, cannot meet the needs of advanced users, and cannot meet the inspection height Customized configuration needs and other issues to achieve the effect of strong flexibility and strong customization
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
Method used
Image
Examples
Embodiment 1
[0027] A management method of a custom script type baseline project. The method is based on the security baseline function of Inspur's SSR host security hardening system. On the basis of providing an official knowledge base package, it provides users with the function of configuring a custom security baseline project , the user adds a custom script-type baseline item on the page of the centralized management platform, and the baseline item is sent to the client together with the baseline item provided by the manufacturer, and the client feedbacks the inspection result after execution.
Embodiment 2
[0029] On the basis of embodiment 1, the method described in this embodiment includes the following processes:
[0030] The user enters the baseline item of script type through a special page account, and the input content includes information such as inspection script, repair script, target value, etc. After the user adds the above information, the system saves the baseline item to the database;
[0031] Before saving to the database, the system invokes the dangerous command recognition module to analyze the scanning script and repair script input by the user, and judge whether the script input by the user contains offensive or destructive sentences, and prompt the user if it exists , and further confirm to the user whether to add; the security risk instruction identification module contains a series of patterns of dangerous instructions, and judges whether each line of the scan script and repair script is dangerous and destructive in the form of a regular expression;
[0032...
Embodiment 3
[0035] Such as figure 1 As shown, a management system of a custom script type baseline project, the system uses a front-end page, a centralized management platform, and a client, wherein:
[0036] The front-end pages include: add / edit / delete pages of script-type baseline items, log viewing pages, and display client inspection results in table form;
[0037] The centralized management platform includes: dangerous instruction identification module, database operation module (save baseline items in the database or read relevant data from the database), knowledge base file generation module, and script type knowledge base delivery mechanism;
[0038] The client includes: a script execution module (the client executes the script in the knowledge base after receiving and updating the knowledge base), a result comparison module, and a log generation module.
PUM
Abstract
Description
Claims
Application Information
- R&D Engineer
- R&D Manager
- IP Professional
- Industry Leading Data Capabilities
- Powerful AI technology
- Patent DNA Extraction
Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic, Popular Technical Reports.
© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap|About US| Contact US: help@patsnap.com