网御网络审计系统-运维安全管控型（LA-OS）方案模板北京网御星云信息技术有限公司第2页共44页编号：时间：2021年x月x日书山有路勤为径，学海无涯苦作舟页码：第2页共44页文档修订记录版本号日期修订者修订说明V3.0.0.x2014-08-13李彬创建第3页共44页第2页共44页编号：时间：2021年x月x日书山有路勤为径，学海无涯苦作舟页码：第3页共44页目录项目概述........................................................................................................................51安全现状分析.........................................................................................................51.1内部人员操作的安全隐患.......................................................................51.2第三方维护人员安全隐患.......................................................................51.3高权限账号滥用风险...............................................................................61.4系统共享账号安全隐患...........................................................................61.5违规行为无法控制的风险.......................................................................62运维安全管控系统方案设计.................................................................................62.1建设原则...................................................................................................62.2总体目标...................................................................................................72.3建设思路...................................................................................................83运维管控系统解决方案.........................................................................................83.1系统总体设计...........................................................................................83.1.1系统概述............................................................................................83.1.2系统组成............................................................................................93.1.3技术架构..........................................................................................103.2系统主要功能.........................................................................................113.2.1用户认证与SSO..............................................................................113.2.2自动改密..........................................................................................123.2.3访问授权管理..................................................................................123.2.4二次审批..........................................................................................133.2.5告警与阻断......................................................................................143.2.6实时操作过程监控..........................................................................153.2.7历史回放..........................................................................................153.2.8审计报表..........................................................................................163.2.9审计存储..........................................................................................163.3系统功能特点.........................................................................................163.3.1运维协议支持广..............................................................................173.3.2对用户网络影响最小............................................
