Initialization method and system of rule base and default strategy of management platform

Abstract

The invention discloses an initialization method and system of a rule base and a default strategy of a management platform. The method includes the following steps that based on an SSR mainframe, the centralized management platform of the system is safely reinforced; when an application program of the management platform starts and runs, whether there are the rule base and the default strategy in a detection database or not is detected; if no rule base exists in the database, whether an original knowledge base file with the XML format exists at a specific position of a disk or not is judged, and if yes, the original knowledge base file with the XML format is introduced into the database to form the rule base; if no default strategy exists, based on the introduced rule base, the default strategy is generated according to certain rules. Compared with the prior art, the initialization method and system of the rule base and a default strategy of the management platform can improve the update efficiency of a knowledge base and a strategy, an initialization script of the database can be better maintained, data of the rule base and the default strategy and data of an XML are thus homologous, and later maintenance work is facilitated.

Description

technical field [0001] The invention relates to the technical field of security management system concentration, in particular to a method and system for initializing a management platform rule base and a default strategy. Background technique [0002] In recent years, information security incidents have occurred frequently, and information security has attracted more and more attention. Security baseline is a concept in the field of information security. It refers to the minimum level of security-related configurations in computer systems and software, including system security configurations, system component configurations, permissions, and user configurations. The significance of the security baseline is to enable users to supervise or control the security configuration status of the managed computers (often servers). However, the majority of users have different understanding of the system configuration, so the Inspur host security hardening system provides a relativel...

AI Technical Summary

Problems solved by technology

[0003] The original knowledge base generally exists in the format of an XML file, and then imported into the database through the management platform program. The imported knowledge base is equivalent to a reference value of the policy (hereinafter referred to as the rule base). Rule base generation strategy. For general centralized management platform systems, the rule base is often imported into the database through the database initialization script when the management platform system is installed. This method is more classic, but it will bring several problems: (1 ) The initialization script of the database will become very large and difficult to maintain (2) When the knowledge base version is upgraded or updated, the workload of rebuilding the database initialization script will be very heavy. At this time, the knowledge base file needs to be imported into the database first, and then from The database initialization script is exported from the database, the process is complex and the operation is less feasible, and the probability of error is higher

Images