Method and device for safety management of server equipment

Abstract

The invention relates to a method and a device for safety management of server equipment. The method comprises the steps of acquiring a safety scanning report for the server equipment; analyzing the safety scanning report, and separating a retrieval keyword which does not pass through a safety check entry from the safety scanning report; and carrying out safety reinforce on the server equipment according to the keyword which does not pass through the safety check entry. With the method and the device for safety management of the server equipment, the automatic processing for safety evaluation, analysis and safety reinforce of the server equipment can be realized, the evaluation result analysis efficiency is improved, the manual analysis error is reduced and the automatic level of safety reinforce is enhanced.

Description

technical field [0001] The present invention relates to the technical field of server equipment security management, in particular to a server equipment security management method and device. Background technique [0002] In recent years, intrusions and attacks involving server equipment have occurred frequently, and the security of server equipment has been paid more and more attention by enterprises and institutions. [0003] Among them, the patch management and configuration of server equipment to form a scale, many commercial companies that develop security products can provide professional-level scanning products, these products can provide security for mainstream LINUX, WINDOWS server equipment, and ORACLE, SYBASE database systems. The detection function provides prompts for security risks such as outdated patch versions and fragile security configurations in the system. [0004] However, these current tools mainly complete the security inspection function. Although s...

AI Technical Summary

Problems solved by technology

[0004] However, these current tools mainly complete the security inspection function. Although some products will give some simple repair suggestions for the existing security risks after the security inspection is completed, but for the current server equipment cloudization, virtualization, and data center Today, the trend of modernization is becoming more and more. The line-by-line reading, analysis and sorting of a large number of equipment safety inspection reports has caused equipment operation and maintenance engineers to devote a lot of energy. The period from the end of scanning to the output of the overall safety status assessment report of the equipment room is uncontrollable. At the same time, the error data generated by manual reading, analysis and sorting cannot be avoided; in addition, with the scan report, it is also necessary to analyze the scan report, and the operation and maintenance engineer will strengthen the server equipment. In the server mode, system patches are updated and configuration files are modified through traditional manual methods, and this reinforcement method can no longer cope with the status quo of server cloudification, virtualization, and data centering.

Images