it运维安全管理与综合审计系统应用（Application of security management and integrated audit system in it operation and maintenance）.docVIP

it运维安全管理与综合审计系统应用（Application of security management and integrated audit system in it operation and maintenance） 1 Introduction With the business development, enterprise IT support system and network in the rapid expansion of the number of servers, with database and network equipment is increasing, how to manage and maintain the equipment, how to guarantee has become an urgent problem of these resources safety. Continue to use the host administrator account / password authentication authorization, the log records stored in local model has many limitations, prone to account / password complexity is not standardized, the administrator to log is incomplete or missing, operation and maintenance and the role of auditing is not easy to separate, focused on the problem of effective audit difficulty. 2 IT operation and maintenance safety risk and demand IT system, database, host, operating system, network equipment maintenance is quite complex, and its configuration and management need sufficient professional knowledge. The technical level of IT system in the enterprise management personnel is uneven, in process management and maintenance, will inevitably have improper operation, or to the server security left hidden, or affect the normal operation of the server. In addition, measures must be taken to strengthen the supervision of the maintenance personnel of the third party vendors in the IT system, and reduce the occurrence of enterprise information leakage. In terms of the use of authentication and authorization, role management, for some core resources, such as the application of system and database system, should have different access privileges, managers or fake identity unauthorized unauthorized use will cause problems. For example, root authority distribution can solve the problem of root permission production, but it will greatly increase the management complexity and security risk, and a little neglect may lead to confusion in management. In addition, the decentr