运维操作安全管控研究与实践

本文介绍了企业通过搭建运维操作管控平台实现跨厂商安全运维操作统一管控的方案与实践,针对所有的运维操作进行事前操作审批,高危操作自动识别,事中运行前审批,高危操作自动识别及阻塞.通过分布式管理框架实现运维操作识别的自动化、过程管控多样化、安全审计精细化,确保运维操作安全、规范、高效.

Research and practiceof operation and maintenance safety control

Through the operation and maintenance operation control platform, the unified management and control of cross manufacturer safety operation and maintenance operation is realized, and a unified management view is provided. For a large number of X86 / minicomputers / virtual machines in the distributed environment, the security specifications of operation and maintenance operations such as host and database are formulated, and all operation and maintenance operations are subject to pre operation approval, automatic identification of high-risk operation, approval before in-process operation and automatic identification of high-risk operation Through the distributed management framework, the automation of operation and maintenance operation identification, the diversification of process management and control, and the refinement of security audit are realized to ensure the safety, standardization and efficiency of operation and maintenance.