基于SSH协议的字符终端会话运维审计的研究与实现-计算机科学与技术；计算机应用技术专业论文.docxVIP

华北电力大学硕士学位论文摘 华北电力大学硕士学位论文 摘 要 运维审计系统是一个用于对系统维护操作进行安全管理的应用系统。它通过堡 垒机将运维人员与运维服务器隔离，以防止恶意的攻击和破坏。但是，运维人员的 账号权限及运维操作也需要安全保护。SSH协议作为一种远程登录安全协议，能很 好地满足运维终端的安全运维访问。因此，开发一套适应需求的SSH会话的运维审 计系统是一项非常有意义的工作。 本文首先对运维工作的现状进行了深入研究与分析，发现并总结其中存在的 问题。主要有四个问题：SSH会话复用率低、运维过程口令管理复杂、记录文件 安全级别低、运维操作与运维人员习惯不贴近。其次本文对解决这些问题需要用 到的技术进行了研究。之后致力于解决存在的问题进行系统的架构设计，以用户 需求为支撑，给出系统的总体功能设计。系统由认证模块、代理模块、审计模块以 及日志模块四个模块组成。再分别对各模块进行了详细设计，主要介绍了系统的功 能组成和重要模块的工作流程和实现方法。本文设计的SSH运维会话审计系统具 有良好的可移植性、安全性，能够很好的与其它系统融合。最后，笔者利用开源 库libssh完成了系统的开发工作，实现了一个可以进行SSH字符运维会话的过程代 理转发、数据记录、过程追踪回放等功能的审计系统模块。 通过与信息运维审计系统的融合后，系统在实际运维环境中得到了充分的考 验，提高了运维安全。 关键词：运维安全；SSH会话：加密存储 万方数据 华北电力大学硕士学位论文Abstract 华北电力大学硕士学位论文 Abstract Operation and maintenance audit system is an application system for security management of system maintenance operations．It isolated the operation and maintenance personnel and operation and maintenance through the fortress machine，in order to prevent malicious auacks and damage．However,the operator’S account fights and operation and maintenance operations also need security protection．SSH protocol as a remote login security protocol，can be very good to meet the operation and maintenance of the operation and maintenance of the terminal operation and maintenance of Therefore．it iS a very meaningful work to develop a set of operation and maintenance audit system to meet the needs of the SSH session． Firstly,this paper finds and summarizes the existing problems which they will lead to after deep research and analysis of the situation of operation and maintenance work． There four main issues：SSH session rate is low,operation and maintenance process password management is complex，record file security level is low,operation and maintenance operation and operation and maintenance personnel is not suitable．Then， this paper researches the technology used for solving these problems and describes their theories briefly．After that，system architecture committed to addressing the problems is designed．With user needs，the overa