CN107480547A - A kind of initial method and system of management platform rule base and default policy - Google Patents

Abstract

The invention discloses a method and system for initializing a management platform rule base and a default policy, comprising: a centralized management platform based on an SSR host security reinforcement system; and detecting whether there is a rule base and a default strategy in the database when the management platform application program starts and runs each time Default policy; if there is no rule base in the database, then judge whether there is an original knowledge base file in XML format at the specified location on the disk, if yes, then import the original knowledge base file in XML format into the database to form a rule base; if there is no default policy, Based on the imported rule base, a default policy is generated according to certain rules. Compared with the prior art, the method and system for initializing a management platform rule base and default policy can improve the efficiency of knowledge base and policy update, and enable better maintenance of database initialization scripts, and also enable the rule base and The data of the default policy is from the same source as the XML data, which facilitates later maintenance work.

Description

An initialization method and system for management platform rule base and default policy

technical field

The invention relates to the technical field of security management system concentration, in particular to a method and system for initializing a management platform rule base and a default strategy.

Background technique

In recent years, information security incidents have occurred frequently, and information security has attracted more and more attention. Security baseline is a concept in the field of information security. It refers to the minimum level of security-related configurations in computer systems and software, including system security configurations, system component configurations, permissions, and user configurations. The significance of the security baseline is to enable users to supervise or control the security configuration status of the managed computers (often servers). However, the majority of users have different understanding of the system configuration, so the Inspur host security hardening system provides a relatively friendly interface for users to scan or repair the security baseline of the managed clients. The basis for security baseline scanning and repair operations is the knowledge base.

The original knowledge base generally exists in the format of an XML file, and then imported into the database through the management platform program. The imported knowledge base is equivalent to a reference value of the policy (hereinafter referred to as the rule base). Rule base generation strategy. For general centralized management platform systems, the rule base is often imported into the database through the database initialization script when the management platform system is installed. This method is more classic, but it will bring several problems: (1 ) The initialization script of the database will become very large and difficult to maintain (2) When the knowledge base version is upgraded or updated, the workload of rebuilding the database initialization script will be very heavy. At this time, the knowledge base file needs to be imported into the database first, and then from The database initialization script is exported from the database, the process is complex and the operation is less feasible, and the probability of error is higher.

Contents of the invention

The technical task of the present invention is to provide an initialization method and system for management platform rule base and default policy.

Technical task of the present invention is realized in the following manner:

An initialization method for a management platform rule base and a default policy, comprising:

Centralized management platform based on SSR host security hardening system;

Detect whether there is a rule base and a default policy in the database each time the management platform application starts and runs;

If there is no rule base in the database, it is judged whether there is an original knowledge base file in XML format in the designated position of the disk, and if there is, the original knowledge base file in XML format is imported into the database to form a rule base;

If there is no default policy, a default policy will be generated according to certain rules based on the imported rule base.

Whether there is a rule base in the detection database, including:

If there is a rule base in the detection database, it means that the rule base has already been imported, so it will not be re-initialized.

Said if there is no rule base in the database, including:

Judging that there is no rule base in the database is based on the fact that there is no corresponding data in the table of the rule base.

There is at least one original knowledge base file in XML format.

When there are two or more original knowledge base files in XML format, and each original knowledge base file in XML format corresponds to a different system, the program sequentially imports the original knowledge base files in XML format into the database.

Whether the original knowledge base file in XML format is present in the designated location of the described judging disk includes,

When there is no original knowledge base file in XML format, if this function has been disabled, it does not need to be imported into the database.

The import-based rule base generates a default policy according to certain rules, including:

Generate default policies that are a subset of the rule base;

If there are multiple original knowledge base files in XML format, that is, multiple operating systems are imported, it is necessary to determine whether each operating system has an initial policy in turn.

Whether there is a default policy in the detection database, including:

If there is a default policy in the database, you need to update the default policy.

An initialization system for managing platform rule bases and default policies, including:

Based on the centralized management platform of the SSR host security reinforcement system, the management platform is responsible for the startup and operation of the application program;

The detection module is used to detect whether there is a rule base and a default policy in the database each time the application starts and runs;

The judging module is used for judging whether there is an original knowledge base file in XML format in the specified location of the disk.

There is at least one original knowledge base file in XML format. When there are two or more original knowledge base files in XML format, and each original knowledge base file in XML format corresponds to a different system, the program sequentially converts the XML format Import the original knowledge base file into the database.

Compared with the prior art, the method and system for initializing a management platform rule base and default policy can improve the efficiency of knowledge base and policy update, and enable better maintenance of the database initialization script, and also enable the rule base and The data of the default policy is from the same source as the XML data, which facilitates later maintenance work.

This method no longer puts the content of the knowledge base in the database initialization script, and initializes the database through the form of the database initialization script, but directly provides the XML file of the knowledge base. When the system starts for the first time, the XML file is automatically imported. This avoids maintaining a huge database initialization script, and at the same time achieves the same effect as importing the database.

Description of drawings

Accompanying drawing 1 is a schematic flowchart of a management platform rule base and a default policy initialization method.

detailed description

Example 1:

Create an initialization system for managing platform rule bases and default policies:

include:

Based on the centralized management platform of the SSR host security reinforcement system, the management platform is responsible for the startup and operation of the application program;

The detection module is used to detect whether there is a rule base and a default policy in the database each time the application starts and runs;

The judging module is used for judging whether there is an original knowledge base file in XML format in the specified location of the disk.

There is at least one original knowledge base file in XML format. When there are two or more original knowledge base files in XML format, and each original knowledge base file in XML format corresponds to a different system, the program sequentially converts the XML format Import the original knowledge base file into the database.

The initialization method of the management platform rule base and default policy is as follows:

include:

Centralized management platform based on SSR host security hardening system;

Detect whether there is a rule base and a default policy in the database each time the management platform application starts and runs;

Detect that there is a rule base in the database, indicating that the rule base has already been imported, and it will not be re-initialized; if it is judged that there is no rule base in the database based on the table of the rule base without corresponding data, then judge whether there is an XML format in the specified location on the disk If there is an original knowledge base file, import the original knowledge base file in XML format into the database to form a rule base;

There is at least one original knowledge base file in XML format, and when there are two or more original knowledge base files in XML format, when each original knowledge base file in XML format corresponds to a different system, the program sequentially The original knowledge base file in XML format is imported into the database. When there is no original knowledge base file in XML format, if this function has been disabled, it does not need to be imported into the database.

If there is no default policy, based on the imported rule base, a default policy will be generated according to certain rules, and the generated default policy is a subset of the rule base; if there are multiple original knowledge base files in XML format, it means that multiple operating systems have been imported , it is necessary to determine in turn whether each operating system has an initial policy.

If there is a default policy in the database, you need to update the default policy.

Glossary:

XML: Extensible Markup Language, Extensible Markup Language.

Through the above specific implementation manners, those skilled in the technical field can easily realize the present invention. However, it should be understood that the present invention is not limited to the above-mentioned several specific implementation manners. On the basis of the disclosed embodiments, those skilled in the art can arbitrarily combine different technical features to achieve different technical solutions.

Claims (10)

1. An initialization method for a management platform rule base and a default policy, characterized in that, comprising: Centralized management platform based on SSR host security hardening system; Detect whether there is a rule base and a default policy in the database each time the management platform application starts and runs; If there is no rule base in the database, it is judged whether there is an original knowledge base file in XML format in the designated position of the disk, and if there is, the original knowledge base file in XML format is imported into the database to form a rule base; If there is no default policy, a default policy will be generated according to certain rules based on the imported rule base. 2. The method according to claim 1, characterized in that, whether there is a rule base in the described detection database, comprising: If there is a rule base in the detection database, it means that the rule base has already been imported, so it will not be re-initialized. 3. The method according to claim 1, characterized in that, if there is no rule base in the database, it includes: Judging that there is no rule base in the database is based on the fact that there is no corresponding data in the table of the rule base. 4. The method according to claim 1, characterized in that there is at least one original knowledge base file in the XML format. 5. The method according to claim 4, characterized in that, when there are two or more original knowledge base files in the XML format, when each original knowledge base file in the XML format corresponds to different systems, the program is sequentially Import the original knowledge base file in XML format into the database. 6. method according to claim 1 is characterized in that, whether the original knowledge base file of XML format exists in the specified position of described judgment disk, comprises, When there is no original knowledge base file in XML format, if this function has been disabled, it does not need to be imported into the database. 7. The method according to claim 1, wherein said imported rule base generates a default strategy according to certain rules, including: Generate default policies that are a subset of the rule base; If there are multiple original knowledge base files in XML format, that is, multiple operating systems are imported, it is necessary to determine whether each operating system has an initial policy in turn. 8. The method according to claim 1, wherein said detecting whether there is a default policy in the database comprises: If there is a default policy in the database, you need to update the default policy. 9. An initialization system for managing platform rule bases and default policies, characterized in that it comprises: Based on the centralized management platform of the SSR host security reinforcement system, the management platform is responsible for the startup and operation of the application program; The detection module is used to detect whether there is a rule base and a default policy in the database each time the application starts and runs; The judging module is used for judging whether there is an original knowledge base file in XML format in the specified location of the disk. 10. The system of claim 1, comprising: There is at least one original knowledge base file in XML format. When there are two or more original knowledge base files in XML format, and each original knowledge base file in XML format corresponds to a different system, the program sequentially converts the XML format Import the original knowledge base file into the database.