Host machine monitoring system based on plugin architecture

Abstract

The invention discloses a host machine monitoring system based on a plugin architecture, wherein the host machine monitoring system comprises a server side and at least one client side; the client side comprises a plugin container and various security plugins, and the plugin container is used for configuring the various security plugins; the server side comprises a monitoring system, the monitoring system comprises a system management module, an auditing management module, a strategy management module, an asset management module, a situation monitoring module, an organizational management module and a file management module; the system management module is used for managing configuration management of the server side; the auditing management module is used for managing client side logs; the strategy management module is used for managing security strategies and sending the strategies to the client side, and the client side configures the security plugins according to the security strategies; the asset management module is used for managing the client side; the situation monitoring module is used for monitoring states of each client side; the organizational management module is usedfor managing user information; and the file management module is used for managing upgrading of the security plugins of the client side.

Description

technical field [0001] The invention belongs to the technical field of network security, in particular to a host monitoring system based on a plug-in architecture. Background technique [0002] In recent years, with the increasing scale and complexity of computer network applications, network security issues have increasingly become the focus of attention. At present, most governments and enterprises have deployed a series of security protection software such as anti-virus software, firewall, intrusion detection system, etc., which solves the external security problems to a certain extent. But according to statistics, more than 50% of network security problems originate from insiders. Therefore, in order to meet the needs of internal information security monitoring, the host monitoring system came into being. It can effectively control the use of terminal hosts and networks by internal users, prevent internal violations, and has a powerful log audit function, so that releva...

AI Technical Summary

Problems solved by technology

Although this system realizes the authentication and monitoring of the monitored computer, the management of its security functions lacks flexibility and ease of use: First, the server administrator cannot dynamically add, modify or modify the security functions on the terminal computer. Delete; Secondly, end users lack an intuitive and clear grasp of the current security status of the terminal

[0005] From the above, from the perspective of software users, the current host monitoring system still has software usability and scalability problems: after the software is successfully deployed, it is difficult for end users to know the current terminal status and specific security policies , causing inconvenience in use; at the same time, if the administrator wants to add or repair a certain security function, he must ask the technician to modify the entire client software, and then upgrade the installation, causing inconvenience in management; in addition, when the network scale gradually increases, it is difficult for the administrator to Ensure that a large number of terminals can be managed at the same time without causing performance degradation or even crashes

Images