基于JumpServer的运维安全审计系统研究与实现  

Research and Implementation of Operation and Maintenance Security Audit System Based on JumpServer

作　　者：曹园青 CAO Yuanqing(School of Mathematics and Computer Science,Hetao College,Bayannur 015000,China)

机构地区：[1]河套学院数学与计算机系,内蒙古巴彦淖尔015000

出　　处：《现代信息科技》2023年第21期76-79,共4页Modern Information Technology

基　　金：内蒙古自治区高等学院科学技术研究项目(NJZY22247);内蒙古自治区哲学社会科学专项项目(ZSZX21090);河套学院教学研究与改革项目(HTXYJY2102);河套学院新冠肺炎重点研发项目(HYZX202089)。

摘　　要：随着IT技术的不断进步,信息系统在各行各业的应用范围日趋广泛,但网络安全风险也变得愈发严峻。目前,网络安全的防护重点大多集中在外部入侵,一定程度上忽略了内部风险,但运维人员的违规操作会从内部破坏系统,因此需要针对运维操作进行安全审计,确保系统的正常运行。基于此,将JumpServer作为核心技术,设计一个运维安全审计系统,实现了登录审计、操作审计、文件传输审计等多种功能,能够全面地监控系统的运维行为,有效提高了IT系统的安全性和可靠性,具有一定的应用推广价值。With the continuous progress of IT technology,the application range of information systems in various industries is becoming increasingly widespread,but network security risks have also become increasingly severe.At present,the focus of network security protection is mostly on external intrusion,which to some extent ignores internal risks.However,the illegal operations of operation and maintenance personnel will destroy the system from the inside.Therefore,it is necessary to conduct security audits for operation and maintenance operations to ensure the normal operation of the system.Based on this,using JumpServer as the core technology,an operation and maintenance security audit system is designed,which realizes various functions such as login audit,operation audit,file transfer audit,etc.,it can comprehensively monitor the operation and maintenance behavior of the system,and effectively improve the security and reliability of the IT system,it has certain application and promotion value.

关 键 词：网络安全 运维 安全审计 JumpServer 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]