Design And Implementation Of Security Operation And Maintenance Audit System

With the development of digital information technology,enterprises are also transforming to digital,and the risk of information security is increasing.Therefore,it is necessary to build a set of operation and maintenance security audit system to standardize the operation and maintenance personnel's safe operation of various IT resources,improve the level of risk control,and ensure the safe and stable operation of various information systems.In this context,this paper designs and implements an operation and maintenance security audit system based on B / S architecture,which is used to solve the problems of unknown identity,unclear authorization,invisible operation in the process,uncontrollable process,unable to audit after the operation,and trace the blame after the event.The mechanism of user management,authority management and monitoring review is introduced to realize the operation and maintenance system operation The operation and operation are controllable,manageable and auditable.This system uses Django as the web development framework,uses My SQL database to store all kinds of data persistently,and deploys it on Linux operating system.Finally,the deployment device is used as a fortress machine.It provides several core functional modules including identity account management,operation authorization management,access control management,security audit management and statistical report management.The identity account management module includes user management,it equipment management,organization management,etc.;the operation authorization management module includes role management,black and white list management,permission level setting;access control management includes protocol setting,operation time setting,operation approval,etc.;security audit management module includes operation and maintenance operation playback;statistical report management module includes various operation and maintenance Report export,batch configuration import and related statistical analysis.Through the tracking analysis of the test and trial operation stages,it is found that the implementation and deployment of the system has indeed improved the IT asset management level of enterprises,and the number of security incidents caused by improper operation and maintenance has also been greatly reduced,which saves theoperation cost for enterprises and guarantees the reliability,availability and stability of enterprise information systems.