Method for bastion machine supporting auditing of web application

The invention relates to the technical field of security operation and maintenance auditing, and especially relates to a method for bastion machine supporting auditing of web application. The method comprises: firstly, configuring web application information on a bastion machine, and then accessing...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: JI TONGKAI, HUANG LIANGZHEN
Format: Patent
Sprache:chi ; eng
Schlagworte:
Online-Zugang:Volltext bestellen
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
Beschreibung
Zusammenfassung:The invention relates to the technical field of security operation and maintenance auditing, and especially relates to a method for bastion machine supporting auditing of web application. The method comprises: firstly, configuring web application information on a bastion machine, and then accessing the configured web application through the bastion machine; when operation and maintenance personneloperate the web application, Nginx service on a bastion machine server recording operation of the web application by operation and maintenance personnel, and meanwhile reporting auditing informationto the bastion machine server; finally, an auditor can perform auditing analysis on the operation of the operation and maintenance personnel on the bastion machine. A web request is transferred according to Nginx, and request information and a response result are recorded, and finally access and audit requirements of the bastion machine on the web application are realized. 本发明涉及安全运维审计技术领域,特别是指种堡垒机支持审计web应用的方法。本发明首先在堡垒机上配置好