Design And Implementation Of System For Audit Of Operation And Maintenance Based On Desktop Virtualization

Because the operation and maintenance of enterprise internal network operation is also more and more,the use of X11,PLSQL,IE or other tools with access and query functions is also increasingly frequent.Although the maintenance tools facilitate the operation to be easy for maintenance of personnel,it may also bring security risks caused by improper operation or malicious attacks.In order to ensure the durability and reliability of the system operation,the operation of the maintenance personnel need to be audited.The protocol analysis is a way of audit for IT system,but the complexity of the protocol used by PLSQL and X11 will undoubtedly increase the difficulty of protocol analysis.In light of this situation,we can combine video audit with virtual agent,and provide solutions for safe operation and maintenance of audit through desktop virtualization architecture.First,this paper introduces the security problems existing in current enterprise network,and analyzes the current situation of virtual desktop technology and the operation and maintenance of security audit.It puts forward the safety audit method based on operation and maintenance of virtual desktop.Then the related technologies and schemes are studied.In desktop virtualization architecture with message interception mechanism and desktop recording technique for audit data acquisition methods,Windows login authentication and DRUP technology for safety assurance,the design scheme is proposed for system.This paper designs maintenance of security audit system based on desktop virtualization architecture.The security audit system is divided into four modules which are data acquisition protocol,identity authentication,protocol audit,virtual protocol-agent.Finally,based on this design,the functions of the modules are realized,and the function and performance test are completed,and the goal of monitoring,control,tracking of process and recording is achieved.