ISMS 系統(tǒng)與網(wǎng)路檢查紀(jì)錄

桃園區(qū)網(wǎng):

伺服主機(jī)與網(wǎng)路檢查系統(tǒng)

(Version2.0)中央大學(xué)電算中心楊素秋2010.10綱要1.伺服主機(jī)與網(wǎng)路檢查系統(tǒng)2.SVRCHKVer-1.0檢測系統(tǒng)3.SVRCHKVer-1.1檢測系統(tǒng)4.SVRCHKVer-2.0檢測系統(tǒng)5.SVRCHK程式及Datatable6.總結(jié)1.伺服主機(jī)與網(wǎng)路檢查系統(tǒng)沿由系統(tǒng)與網(wǎng)路檢查紀(jì)錄表(ISMS認(rèn)證需求)Tyrc:forISMS認(rèn)證(2009)2.SVRCHKVer-1.0檢測系統(tǒng)SVRCHK檢測方法檢測次數(shù):1time/dayFileid.by$year/$month/$mday/$srv_name檢測工具Router:pingDNS:digWWW:wget,socket-portProxy:curlUserInterfaceJSP+Java(Tomcat)3.SVRCHKVer-1.1檢測系統(tǒng)Ver-1.1檢測範(fàn)圍Tyrc,Ncu_cc,Ncuad,Ncu_rd

NCUComputerCenterISMS認(rèn)證(2010)Ver-1.1檢測方法略同Ver-1.0伺服系統(tǒng)種類大幅增加Router,DNS,WWW,MRTG流量Portal,電子表單,BlackBoard,MS-SQL,MySQLSMTP,PoP3,IMAP,Proxy,News,VMware,LDAP,DHCP,NFS帳號管理,NIS(NetworkInformationSystem)Others3.SVRCHKVer-1.1檢測系統(tǒng)(cont.)檢測工具Router:pingDNS:digWWW:wget,Nmap(socket-port)Proxy:curl,NmapSMTP,News,pop3:expectMS_SQL,MySQL:expect,NmapDHCP:ping,NmapVMware:Nmap3.SVRCHKVer-1.1檢測系統(tǒng)(cont.)檢測小撇步Servicestatuscollection時(shí)間長部分Server回應(yīng)時(shí)間頗長statuscollection時(shí)間提早些檢測方法精簡(Nmap)確實(shí)(expect,wget,curl)Securityfilter(Transit繞道)問題點(diǎn)(transit?/target?)#!/bin/bashRSYNC=/usr/bin/rsyncLOCALPATH=/home/yang##Susan2010-01-29::NewsTestOK!VAR=$(expect-c"spawntelnet4110#send\"telnet4110\r\"expect+OKsend\"USERcenter7\r\"expect+OKsend\"PASSxxxxxxxx\r\"expect+OKsend\"STAT\r\"expect+OKsend\"QUIT\r\"expect-timeout1")echo"$VAR"Example:SMTPservicedatacollectionscript#!/bin/bashRSYNC=/usr/bin/rsyncLOCALPATH=/home/yang##Susan2010-01-29::NewsTestOK!VAR=$(expect-c"spawnsshyang@6expectyes/nosend\"yes\r\"#expectpassword:send\“XXXXXX\r\"expect\"\\\\$\"send\"telnet140.115.X.X119\r\"send\"help\r\"expect-timeout1")echo"$VAR"Example:Newsservicedatacollectionscript4.SVRCHKVer-2.0檢查系統(tǒng)Ver-2.0改善需求增加檢測次數(shù)早/午/晚or每小時(shí)一次統(tǒng)計(jì)G次數(shù)提供細(xì)部資訊查詢UserInterface伺服系統(tǒng)由user線上鍵入管理員認(rèn)證後,自動(dòng)偵測Database查詢File:$year/$month/$mday->DB4.SVRCHKVer-2.0檢查系統(tǒng)

(cont.)Ver-2.0檢測Tyrc,Ncu_cc,Ncuad,Ncu_rd

管理自動(dòng)化Dynamiccreatedbyuser/managerServerRegisteredbyuserServerconformedbymanager安全性考量SpringSecurityUserauthenticationUserauthorizationDatabase查詢4.ＳVRCHKVer-2.0檢查系統(tǒng)

(cont.)SVRCHK

Ver-2.0檢查系統(tǒng)A.UserLoginSpringSecurityAuthentication(user,passwd,enable)Authorization(role)B.Server

Registeration33/simple-svrchk{id,hostname,hostip,port,email,creadted}4.ＳVRCHKVer-2.0檢查系統(tǒng)(cont.)C.Servicestatuscollection**Retrieveserverworkinginfo.per-hour{id,hostip,score,retrieval,creadted}Evaluatetheworkingstatus{id,hostip,status,scr:retrie,date,creadted}D.QueryservicestatusISMS報(bào)表文件33/SVR/svrchk_table.jspQueryInterface4.SVRCHKVer-2.0檢測系統(tǒng)

(cont.)5.SVRCHK程式及DatabaseSpringFramework提供許多API,幫助縮減Web應(yīng)用系統(tǒng)發(fā)展的效能.SringMVCDatabaseAccess(JDBC,Hibernate,JPA)SecurityFormValidator

FlowControlWebServiceOthers...5.SVRCHK程式及Database(cont.)MysqldatabaseSERVER{Host_Name,Host_IP,Host_Port,Host_Email,CREATED}PSTATUS{STATUS_IP,STATUS_SCORE,STATUS_RETRIEVE,

CREATED}DAY_STATUS:{DAY_IP,DAY_STATUS,DAY_SCORE,

DAY,CREATED}5.SVRCHK程式及Database(cont.)Crontab

執(zhí)行程式svrchk-fetch.javaCollectservicestatusaccording{IP,PORT}svrchk-exec.javaValuatetheservicestatussvrchk-status.javaReportDailyservicestatus5.SVRCHK程式及Database(cont.)JSP網(wǎng)頁accessscriptSvrchk_table.jsp33/SVR/svrchk_table.jsp改善Security安全性Modularity模組化Reusability再利用5.SVRCHK程式及Database(cont.)[root@center7-4Data]#ls-l總計(jì)56-rw-r--r--1rootroot30610月2316:308-rw-r--r--1rootroot30810月2316:311-…-rw-r--r--1rootroot29710月2316:30-rw-r--r--1rootroot31110月2316:30#more1#Nmap4.11scaninitiatedSatOct2316:31:102010as:/usr/bin/nmap-p53-P0-oN11Interestingportson.tw(1):PORTSTATESERVICE53/tcpopendomain#NmapruncompletedatSatOct2316:31:152010–1IPaddress(1hostup)scannedin5.511seconds5.SVRCHK程式及Database(cont.)|2078|1|1|1|2010-10-2515:32:12||2079|33|1|1|2010-10-2515:32:12||2080|3|1|1|2010-10-2515:32:12||2081||1|1|2010-10-2516:32:12||2082|50|0|1|2010-10-2516:32:12||2083|4|0|1|2010-10-2516:32:12||2084|38|1|1|2010-10-2516:32:12||2085|3|1|1|2010-10-2516:32:12||2086|1|1|1|2010-10-2516:32:12||2087|99|1|1|2010-10-2516:32:12||2088|2|1|1|2010-10-2516:32:12||2089||1|1|2010-10-2516:32:12||2090|8|1|1|2010-10-2516:32:12||2091||1|1|2010-10-2516:32:12||2092|12|1|1|2010-10-2516:32:12||2093|1|1|1|2010-10-2516:32:12||2094|33|1|1|2010-10-2516:32:12||2095|3|1|1|2010-10-2516:32:125.SVRCHK程式及Database(cont.)mysql>select*fromDAY_STATUS;|DAY_ID|DAY_IP|STATUS|SCORE|DAY_INFO|DAY_CREATED|+++++++|182||G|23:23|2010-10-26|2010-10-2623:32:43||183|12|G|23:23|2010-10-26|2010-10-2623:32:43||184|1|G|23:23|2010-10-26|2010-10-2623:32:43||185|38|G|23:23|2010-10-26|2010-10-2623:32:43||186|1|G|18:18|2010-10-27|2010-10-2718:32:42||187|8|G|18:18|2010-10-27|2010-10-2718:32:42||188|3|G|18:18|2010-10-27|2010-10-2718:32:42||189|50|NG|0:18|2010-10-27|2010-10-2718:32:43||190|4|NG|0:18|2010-10-27|2010-10-2718:32:43||191||G