特权账号安全管理系统研究及分析  

Research and Analysis of Privilege Account Security Management System

作　　者：刘奇 Liu Qi(Guohua Energy Investment Co.,Ltd.,Beijing 100007,China)

机构地区：[1]国华能源投资有限公司,北京100007

出　　处：《信息与电脑》2020年第21期198-200,共3页Information & Computer

摘　　要：本文在深入研究国内外特权账号安全管理相关技术的基础上,设计和实施特权账号安全管理平台,实现集中、自动化地管理所有类型的特权账号、密码,提升各纳管系统的主动防御能力,降低弱口令、口令泄露带来的敏感信息外泄的风险。本文围绕特权账号安全管理系统的设计、能力等方面进行详细分析,还针对安全性、可用性、可靠性等设计,真正从技术管控上和制度要求上实现特权账号安全管理,实现特权账号种类的全覆盖和生命周期的完整涵盖,满足未来不断变化的需要。Based on the in-depth study of the related technologies of privileged account security management at home and abroad,this paper designs and implements the privilege account security management platform,realizes centralized and automatic management of all types of privileged account passwords,improves the active defense capability of each ATM system,and reduces the risk of sensitive information leakage caused by password and password disclosure.This paper analyzes the design and capability of the privilege account security management system in detail,and designs the security,availability and reliability of the system to realize the privilege account security management from the technical control and system requirements.To achieve the full coverage of privilege account types and life cycle,to meet the changing need s in the future.

关 键 词：特权账号 安全管理 运维管理 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]