Operation Control and Audit (OMA)-

Operation Control and Audit (OMA)

Module Introduction

SiCAP-SiCAP-Oper黑光ation Control an林又d Audit (OMA) from the相身 multi-dimensional, fin明商e-grained resource authorizat行房ion mechanism, the whole process of o外少peration recording a用服nd control, a full range of opera飛玩tion auditing to the who謝些le operation process妹看 of video playback, to ach醫鄉ieve the operation p做劇rocess of the " preventi船現on beforehand, con哥林trol during the incide子多nt, audit after the inc數海ident ", a懂高nd support SSO single sign-on and a 慢東variety of operation tools, si算錯mplify operations and impro街師ve work efficiency at the same time, 章技comprehensively solve the problem低什 of operation secur市行ity, and effectivel他術y improve the level雨睡 of enterprise IT ope女服ration management.

Feature Introdu懂器ction

User Identity Unified Managemen房老t
Centralized account man冷火agement and unified authenticati遠外on; Multiple authentication methods西湖, two-factor authentication, hybrid 妹業authentication; Provide r信筆ole customization and single 多路sign-on.
Asset Information Unified manage器嗎ment
Automatic asset discovery and identi影這fication; Unified management 秒內of the whole life cycle of assets; 作吃Support for rich asset公兒 types and protocols.
Multi-dimensional, Fine-gra腦現ined Authority C睡弟ontrol
On-demand fine-grained a窗街uthorization based on the principle of 懂地least privilege for authorization;Fl師銀exible access control po得學licies; Dynamic authorization base相對d on authorization lists; Te中金mporary work order auth還動orization; Privilege request lists 老東and access limitations; Highly 視笑secure two-person視數 collaboration and revie少亮w;。
Automated Management
Automatic auditing of asse在購t accounts; Automatic passwor科木d change and automatic password verif麗山ication for asset accounts; A作裡ccount password security policy地新 customization; Operatio爸影n script batch automatic executio明樹n.
Multiple Operation Met木機hods
Client-side Ope哥報ration Clientless Operatio快的n Direct Connect O大一peration OP Operation
 Conversational Operations Entire P會一rocess Control and Audi北資t
Operation proces術看s real-time control, real-你要time alarm, real-time blocking; Compre山朋hensive fine-graine木老d audit trail; Operation proce公玩ss session playback; Full process vid東南eo and video play了道back; Flexible醫什 retrieval of audit records and m喝習ulti-dimensional statistics;跳報 Intelligent audit assis美算ted decision-making.
Total Security Contr訊長ol
Ability to detect and analyz靜作e account risks; 煙火 User abnormal access behavior i司內dentification and c空海ontrol. Anti-bypass 店低behavior auditing.

Module Characterization

Behavioral audit鄉我ing for comprehensive operations湖窗

Real-time and accurate vi又你olation blocking

Secure and efficient two-person collabo聽數ration

Highly secure pas的林sword synchronization

 >

Typical Case

● Well-known branches of the five 都票major state-owned banks

Along with the pace of fi外志nancial electronic management, and ban嗎話k IT assets increase year by姐弟 year, the current operation proc厭廠ess of manual operation and human s樂兒upervision of the security risks離坐 brought about by the increasing但很, the old means業劇 can not adapt to the moder低湖nization of IT management requirements去店, and the "The Cybersecurity 習關Law of the People's Repub體拍lic of China " also requires ent拿麗erprises to strengthen the operati問司on of the security manage離森ment aspects of th照兵e construction. T喝愛herefore, based on the current sit煙嗎uation, the customer urgently needs to上議 build a unified operatio請件n management platform to meet its daily可務 management nee草船ds and comply with 我跳the new national policie多在s and regulations. Combin窗姐ing the customer's en看麗vironment and needs,視費 Suninfo provides users with the 飛家Operation Control and Audit (Abbrevi子長ation:OMA) of the In看答forCube Security intell能章igent CA Platform (Abbreviation:SiCAP工舊) to provide an o日看verall solution for OMA, w不飛hich opens up the links of oper黑答ation personnel, assets, processes an數西d data to form a three-in-one platfor嗎關m of operation, security, and謝在 data,from multi-dimensional, fine-g西高rained resource authorization業吃 mechanism, the whole process of ope草開ration records and contr著時ol, all-round o媽也peration audit 數線to the whole operation process video p國上layback, realize the operation and main雜月tenance process of "preventio唱機n beforehand, control during the in是雜cident, audit afte國聽r the incident", and support SSO s紙林ingle sign-on and a variety of opera門玩tion tools; at the same time wit來坐h the process manag跳技ement system for the depth o答歌f the integration弟鄉, the formation of the "看區;incident problems - work order 懂也process - operation processing -高笑 audit report" c資可losed-loop operation specifi舞跳cation, which he自拿lps customers to build a visi學費ble, controllable, automatic, safe and為訊 intelligent IT operatio分歌n security management pla線制tform.

Automated Operation

Module Introduction

SiCAP-Automated Operation adopts an 樂業engine-less model, based on rich scr她些ipt libraries, for differ一紅ent operation sc頻裡enarios, through the con近知struction and issuance o能到f script tasks, batch 男黃script execution is carr空市ied out to simplify t他紙he daily operation; sup她了port for complex o是外peration scenarios見姐, visualization of下畫 the operation tasks a謝中re flexibly arran電放ged, and automated on a regul吧雪ar basis, to meet the personalize子和d automation scena空玩rios demanded by customers from al內報l industries, assisting the IT man老愛agement staff in a知多utomating the exec從員ution of routine work,為北 accelerating the effici務問ency of IT operatio白他n and reducing the problem of h算和uman operation, so as to inc技說rease the efficiency of the operation看鐵 in the enterprise.

Feature Introdu和坐ction

Visual Script Libra間生ry Management
Provide rich scripts, including 學醫but not limited to s場唱hell, Python, go, batch processin通很g and other common 術個scripting languages. Can m廠開eet the needs of automated operation sc用雪ripts for various sc我錯enarios of operating systems, n為錢etwork/security devices, mid跳大dleware, databases, and討刀 applications.
Security Hardening Self-tests Aut電開omation
Provide check scripts that can meet行年 the requirements of the高費 bank's security bas樂火eline and management s木事pecifications an用紙d update them in a ti鐘頻mely manner. Supp畫中ort flexible configuration and adjust話匠ment of security reinforcement 制什templates Support regular and automati多日c security baseline checking, 錯店provide statistical inform費歌ation and generate reports on t風票he checking results. Pro們月vide reinforcement self-check要志 and repair suggestions for unsatisfac都舞tory items.
Automated Task Execution
Support for automating scripted t鐵和asks for one device or multiple devic頻大es without human intervent服話ion; Support for automated singl器熱e or batch file distribution unat聽件tended.
Rich Operation Scenario Sup冷討port
Provide automated configurati習暗on management scenarios, support笑場ing regular automated c林科ollection of asset configuration些一s, regular automated verification新姐, and collection result信唱s can be synchr大說onized to CMDB; Support regular sec又計urity reinforcement self-test, built-in又水 security baseline, fl腦女exible configuration and a玩城djustment of reinforcement templates, p知美roviding detailed info志紅rmation on the implementati麗錯on results and rein吧理forcement self-test re機離pair recommendations; Support術人 for regular automated inspe媽山ction of assets (built-in security bas好音eline check scripts, e會遠qual protection level 2 and 3 照站check scripts).
Automated Job
Based on the rich operation script lib校黑rary and flexible 音中visual job schedul習路ing capability, it can 如件standardize and p用話rocess the daily and comp好姐lex operations, re志但duce the workload of operations p媽照ersonnel, and lower th如白e risk of human operati就電on; through the manual trig讀子gering of the execution of the t金雨hree scheduling modes of execution, ti朋明ming execution and exe土說cution according to the cycle, it can s這慢atisfy the automa作校tion of the operations needs in differe間低nt scenarios, and improve窗銀 the efficiency of opera校街tions.

Module Characterization

Zero Impact: engineless mode, zer著歌o impact on the production sy技對stem

Richness: rich scripts and scen森你arios to flexibly meet the nee年她ds

Automation: automated task executio光了n mechanism, improve the efficien南妹cy of operation

Standardization: schedul個事ing mechanism to establish a standard w爸雨orkflow

Efficient: distributed cluster deploy是拍ment, rapid completion of 聽可large-volume tasks

Easily Scalable: micr男很oservice architecture,下筆 horizontal dynamic expan可黑sion without affecting t線理he business

Typical Case

● Well-known branches o個你f the five major st也可ate-owned banks

With the development 器劇of financial electronic manageme和近nt, bank IT assets increase year 著自by year, there is a信機n urgent need for automa樂土ted operation, and secondly, with “T去微he Cybersecurity Law” and so工工me planning of C兵好hina's banking inform對兒ation technology, the securi麗吧ty check and automati業做on degree of the bank'白這s requirements in看腦crease, how to improve 計亮the security of IT operation and西制 the level of operation and maintenan但木ce automation, so窗紙 as to make the daily operation stand樂多ardized and automated, is th現能e main challenge currently facing. 外大The automated operation solution of線南 InforCube Secu道中rity intelligent CA Platform (Ab但快breviation:SiCAP) fo海服r the five major state-owned banks西雨 addresses user pain樹河 point issues, is data-based and嗎吃 scenario-oriented, and女舊 realizes basic operation scenarios in師林cluding automated s答關cript execution and file dist習視ribution for PaaS, IaaS, and 明內other resources 火術in the bank thr校愛ough the operation tool and operation店行 scheduling, and real銀市izes security reinforcement autom睡地ation scenarios in line with the 雪黑requirements of the bank,daily inspecti那還on automation scenarios, asset confi月門guration automation scenar秒爸ios in the bank, and customized ope劇美ration scenarios based on 相紅the visualization of operation要靜 task scheduling, which 畫書improves the efficiency of operation a請樂nd standardizes the proces火我s of operation.

● One of the five wholly 樂得state-owned power generation enterpr這科ise groups

After years of 花習informationization constructio飛妹n, the overall development of i坐照nformationization in近服 group companies is not only fast but舊用 also deep. The con舞數tinuous increase of busine商制ss systems has l雪少ed to the increasing pre土聽ssure of daily IT如場 operation and maintenance and ser能多vice support, which has brough化大t great challenges to IT operation. Ho制了w to solidify and r匠船efine the routine operat事放ion and maintenance work, realize aut數亮omated operation and ma人近intenance and service, enhan藍習ce the efficiency of operatio車路n service, and improve the satisfact鄉嗎ion of IT service is 藍來an urgent problem農行 to be solved by the IT maintenance dep司從artment. Based on t問相he automated operation and mainte通很nance in InforCub話分e Security intelligent CA Pla明唱tform (Abbreviation:SiCAP), Sunin國爸fo builds an automated問弟 operation framework for users中購 to form a full range o月兒f automation thr城長ough asset configuratio問刀n automation, script task autom從自ation, security inspection aut用訊omation, and operation sce公說nario automation, which red農務uces human operations and improve通黃s the efficiency of daily ope門短ration; and at the same time, 分鄉based on the rich oper市通ation script libra懂雪ry and flexible visualiz話術ation of operation scheduling, 工拍it can realize the automation of oper錯冷ation and maintenance operations and s月金ervices. effectively improves the e東內fficiency of operation servi用裡ces, enhances IT service sat可分isfaction, promote拍去s the transformation花朋 of IT operation and maintenance書麗 to IT operation, and enhances th男為e value of the IT maintenance departmen章章t.

Database Operation and Audit (DBA)

Module Introduction

SiCAP-Database Operation and Audit多時 (DBA), dedicated件頻 to comprehensive d工唱ata security, can effectively mon海我itor database access and operati可舞on behavior, accurately 我問grasp the operational status of the da頻長tabase system, 下理support databas校老e operation management a對歌nd operation auditing, bu理通ilt-in and customized rules flexibly 好工achieve real-time blocking坐歌 of overstepping, tampering and high-ri中城sk operations, and record a廠老nd alert. Thus, it can資低 realize the ri舊房sk prevention of security events be這商forehand, real-time blocking d個空uring the event, and locating, ana又你lyzing and tracing the evidence afte服唱r the event, so as水新 to guarantee the database security and飛電 meet the compliance requi村舞rements such as equal prot車日ection and industr明玩y norms.

Feature Introduction

Full Database Audit湖什
Through the prior p兵了olicy planning, operation m得通onitoring, after the session audit on t行金he database operation of the whole pr說業ocess of all-round a爸術udit.。
Fine-grained Audit
By analyzing the SQL作輛 semantics of different database了視s, it extracts th吧男e relevant elements i書飛n SQL (users, operation 體銀types, tables, fields, vi好校ews, indexes, procedures, functio件雜ns, return results...); it c刀鐵an audit the content 數也of the return results of operation 行一statements; it can 靜麗audit the database acco草化unt, user name, application account腦身, operation, time, s如刀ource and destination, application機兒s and tools, and other information 民資(business-relat風我ed information, re地好asons for exceptions)間友.。
Multi-tier Business L鄉他inkage Audit
Three-tier architecture友話 auditing: by correla志術ting the access of the ap空玩plication layer and the access oper民微ation request of th好鄉e database layer, it trace錢放s back to the ori個師ginal visitor of the application laye資還r; business auditing: SiCAP analyze遠聽s the communication protocols,路鐘 such as http, htt資員ps, etc., between器冷 the front-end bro了你wsers and the WEB servers, and i空校dentifies the business operation behavi水什ors.
Audit Strategy Ma窗刀nagement
Customize impor器遠tant events and risk events 朋年based on flexible唱錢 combinations of logged-in users, sour著分ce IP addresses,務火 database objects (divided 行雨into database users, t劇樹ables, and fields), operation times,事器 SQL operation comm行答ands, the number of records retu身樹rned or the num市話ber of rows affected, SQL executi自火on results, and the length of SQL exec理靜ution.。
Security Alert and 煙秒Reporting Statistics
Trigger security alerts based on au一喝dit strategy for timely risk t道算reatment; built-in rich and granular re可玩ports to meet compliance r行在equirements such as equal prote是外ction and industry norms.
Intelligent Audit-Free
Automatically builds a rule b雨唱ase, simplifies user operations,又司 reduces auditing of愛綠 repetitive data, reduces audi農術t content storage,煙機 and improves system performance.
Database Operations Audit
Real-time monitoring of 制學user access to t男子he database of 喝器various operations, h短可igh-risk operations ca下師n be real-time blocking a用可nd alarms, and t麗吃hrough video playback to reprodu放們ce the original operation proc是畫ess.

Module Characterizati一說on

Fine-grained auditin動北g with timely alerts少睡

Zero business im站窗pact audit model

Intelligent analysis for effici紙少ent auditing

Typical Case

● A large logistics ente遠村rprise

With the arrival of the era 劇土of diversified consumption, flexible間下 production and efficient circu請業lation, the society an男能d customers have highe場市r and higher requirement錢我s for logistics se制哥rvices, and the quality of l吧靜ogistics services is an important trend中購 in the future dev問雜elopment of logistics. 票事The premise of pro公動viding high-quality logistics services 吧她is the security黑到 of the database, logistics services a光器cross a wide range of geogr生雨aphical areas, 作對involving the same場的 city, within the pr作近ovince, governorate, internati得舊onal, in addition to a lar秒信ge number of ope吧知rators, the compl信信exity of the management hie熱票rarchy and other factors lead to a lar音他ge number of large-scale logistics in老習formation systems th拿件ere are a large number of data 用舞security issues, the 笑男prevention of theft and ta到光mpering with sensiti水又ve data is increasingly becomin麗下g a serious challenge to the data的工base information assets.師校 Combining the characteristics and pa們老in point needs of the lo笑兒gistics industry, Suninfo pro數熱vides users with the Data錢上base Operation Audit (Abbreviation:DBA)公森 in InforCube Security intelligent CA 分哥Platform (Abbreviation:SiCAP)靜聽, which is an overall sol討遠ution for Database Oper土輛ation Audit, and 行花effectively monitors the d放議atabase access and operati海藍on behaviors by grasping the op東愛eration status of the database 但亮system, blocking the ul個到tra-authorized, tampered and hig會哥h-risk operations in real time, and歌章 comprehensively auditing and monitorin房很g the operation status of the databas民現e system. Real-time blockin知村g, comprehensive audi南煙ting and timely alerts realize t報可he risk prevention of木子 security events beforehand, real-t聽場ime blocking during the event, and刀河 location analysis and evidence 長們tracing after the e就冷vent, so as to ensure database sec微上urity and meet the compliance r年暗equirements of equal pro輛我tection and industry nor業費ms.

● A famous car manufactu去如rer

With the rapid development of indus聽女trialization and ec關子onomy, China's automobi影些le manufacturing industry has achieved暗笑 rapid growth, the number 會算of enterprise information術木 systems and interna購著l users continue to increas科東e, the database security of enterprise公區s in the automobil業湖e manufacturing industry is司司 facing great challenges,化答 such as: internal 上愛technicians exist in 地美the misuse of operati章日on, violation of the ope服計ration, overstepping the right to o山河perate, damage to the safe operation 校就of the business system; third鐵見-party developers and maintai我暗ners of the misuse of operati市北on, malicious operation an去家d tampering; super administrator The子白 super administrator has 舞廠too much authority and cann北得ot be audited and monitored,我路 which makes it impossible了北 to trace and locate the real ope算好rator when a security incident occurs, 科銀etc. Meanwhile, the promulgation兒區 of “The Cybersecurit了業y Law” has impo金妹sed higher requirements on n風金etwork security and data security南工, and database security needs to請厭 be strengthened urgently. Suninf上下o provides Database Operation Aud長紙it (DBA) in Infor業匠Cube Security i店紙ntelligent CA Platfo南風rm (Abbreviation:SiCAP), whi校校ch is capable of real-time m訊姐onitoring of the core database stat拿水us, independent auditing北頻 to ensure the fairness of the audit 紅又results, fine-grain制地ed and comprehensive auditing小西 of the database access and operation吃國, and alerting of the ab銀票normal operation of the da吧歌tabase; meanwhile, it supp睡說orts fine-grained authority control 行鐵and management of the databas業玩e operation, and comprehens筆得ive audit of operations; it provides 上員categorized statistical graphi下去cal reports to facilitate the放房 management and def就鐵inition of responsibility aft匠微er the event, so as to co新制mprehensively safegu樹民ard the database security an地金d meet the complia這林nce requirements.

System Integrated Log Audit (S到科IEM)

Module Introduction

SiCAP-System Integrated做路 Log Audit (SIEM) can provide c公但omprehensive an錯學d diversified log collection, massive a司火nd diversified 玩秒log paradigm, c要不entralized storage a鐵舊nd flexible retrieval, c視明omprehensive intelligent a腦訊nd efficient analysis, rapid respons好鄉e to risk alerts, easy traceability an綠嗎d evidence, real物街izing the full life cycle manage關如ment of logs and a謝去ssisting maintenance pe冷麗rsonnel in monitoring logs in multiple遠哥 dimensions, su哥你ch as anterior (risk policy), intermed商風iate (analyzing and tracing),兵姐 and posterior (下跳investigating and obtaining evide訊學nce). It monitors logs in multiple dim中購ensions, helping a筆中dministrators accurately find key ev他身ents and data from massive l員有og data, accurately 中購locate network faults, identify securi男山ty threats in advance, i兒草mprove network performance, safeg暗厭uard system security, and help en能玩terprises meet 間路the requirements 山子of “The Cybersecurity少路 Law” and Equal Protection 2.0 com服影pliance.

Feature Introductio腦遠n

Log Capture and Manage黃師ment
Rich log source support Automatic di有很scovery and unified management of log生樹 sources Multiple l下制og collection methods Multipl區拿e log paradigm, standardization F懂就lexible and efficient log retrieval朋會 Convenient log 筆金forwarding configura要火tion。
Comprehensive Log Analysis and 呢姐Risk Alerts
Massive logs, intelligent clustering中有, the formation of rule銀理s knowledge base Flexible configur現子ation of risk strategy, various 志雪warning methods and fast re行身sponse. Based on a variety of暗水 machine learning algorithms to achi為船eve in-depth intelligent analy科森sis and risk predictio街草n Flexible con看還figuration of various alert meth黑理ods, fast response, impro光上ve efficiency and reduce請黑 impact.。
Easily Traceable and家山 Traceable, Audit Compliant
Provide rich and diversifie化北d visualized data anal街看ysis, easy traceabilit劇商y, and provide effective basis f問去or tracing and evidence collecti著你on afterwards. Supports compl工老iance and meets the r暗算equirements of “The Cybersecu遠日rity Law” and Equal Protection 2.0.。
Total Solution
Linkage monitoring, operation工問 audit, automated operation modu窗下les, can provide log audit服車 overall solution to achieve a comprehe紅兵nsive log source s什又ecurity control.。

Module Characterization

Detailed log paradigm and log classific機生ation

Rich and flexible log retr西靜ieval and statistical rep森科orting

Centralized and comprehensive 麗睡log auditing

Typical Case

● Transportation Department of a 都業province

At present, the state a校務dvocates the unified 門劇management of go開議vernment informatization, requ線去iring government depart到子ments to continue to deepen 校數the government services子照 "one network", t放懂he full implementation of urban gover說熱nance "one network&q嗎雜uot;, speed up government opera問制tions "one network" and謝公 other policy guidelines, 影喝so the scale of information technol行自ogy business continue工如s to develop,log data quan玩間titative, and logs are道東 scattered, complicated,門影 diverse formats, different uses, inco分什mplete, usually found on術小ly when problems occ姐遠ur, and need to 筆草manually check the effic空化iency is low, can not月在 realize the fault of rapid p拿都ositioning and e務志arly warning. In response朋著 to the pain point demand for log雨近 auditing, Suninfo p為黑rovides users with System Integrated 放什Log Audit (Abbreviation:長工SIEM) in InforCube Security 可門intelligent CA Platform (Abbreviation:物分SiCAP), which is capable o月街f unified management of logs through di照分versified log collection, massive 風資and diversified log p地裡aradigm, centralized lo吃到g storage, and fle能林xible log retrieval, and a兒畫t the same time, app你哥lies intelligent algori都子thms and big data tech志地nologies to intelligent銀坐ly aggregate and ret做時rieve massive logs and t個制o provide a unified management of l票女ogs. identify security threats a金城nd provide timely alerts to effecti照醫vely safeguard system security.