Research And Application On Operation Audit System Function Expansion And Automatic Assignment Of Operation Rights

With the Ukraine hacker attack incident,the domain name server was hacked,resulting in the industry giants well-known Internet enterprise site to provide services and other major events global concern,the importance of information security to a new level.As the backbone enterprise of the national economy and the people's livelihood,the information security of the power industry is directly related to the robustness of the smart grid.Today's information security should not only focus on external attacks,but also to prevent the security risks and hidden danger within the operation and maintenance in the operation of information systems.According to the incomplete statistics,more than half of the security incidents are not from external attacks,but from the internal access and illegal operation,so It is necessary to carry out internal control audit of information system operation and maintenance.The operation and maintenance auditing management of the power industry is completed and put into operation in the "SG-ERP" stage,and the operation and maintenance of information systems within the enterprise are continuously covered.Through the daily application,operation and maintenance of the audit system has been unable to cover all the information system maintenance,operation and maintenance of information system operation can not completely through the operation and maintenance of the audit system,information system operation and maintenance personnel are not unified entrance;existing public account,did not achieve the requirements of minimizing power management,operation and maintenance of the existing audit system has been unable to meet the requirements.In this paper,the system architecture and operation protocol of the operation and maintenance audit system were studied,combined with the daily maintenance work,found that the operation and maintenance of the audit system maintenance entrance is not unified,operation and maintenance of public accounts,operation authority management operation is not careful,extend the function based on the existing operation and maintenance of the audit system,to solve the existing problems of operation and maintenance of the audit system.Microsoft's Remote App software was introduced,the virtualization technology was used to show the remote execution application in the local client,which made the user's operation processes transparent.Virtualization technology to support the operation and access of a variety of applications,to meet the operation and maintenance of the information system operation and maintenance of the emerging operation and maintenance of the object needs to achieve unified operation and maintenance audit entrance.Operation and maintenance account password using dynamic generation mode,to avoid the operation and maintenance account public,indiscriminate use.The integration of information and communication operation support platform(SG-I6000)in a ledger data rich information resources,standardize the management process of maintenance plan,work ticket,the maintenance information,process and operation of audit system integration,realize the sharing of resources and maintenance ledger data,and complete the operation task automatically create,automatically assigned permissions function.Operation and maintenance audit system achieved the above functions through the interface development,and the State Grid Corporation of the network companies were deployed to achieve the information system operation and maintenance lean management requirements and enhance the security of information system.