Shulou(Shulou.com)06/01 Report--

I. Summary

1. Project background

The propaganda Department of Tianjin Municipal Party Committee is based on promoting the modernization of urban governance system and governance capacity, aiming at "network construction, network management, network use, network industry", starting from news, government affairs, service and other aspects, based on data and cloud computing technology. Build a "Jinyun" platform, by strengthening the integration of information resources, promoting the sharing of government resources, promoting the innovation of government management, promoting social governance, and accelerating the transformation of government functions. The first phase of the project will focus on the construction of Jinyun Central Kitchen to form an omni-directional, multi-level, multi-part mainstream public opinion matrix, and constantly enhance the transmission, guidance and influence of public opinion on the network. It lays a solid foundation for realizing the deep integration of traditional media and emerging media in news collection, production, processing and sharing, and to build a "one cloud" ecological pattern of network public opinion management in our city.

Cloud database audit product is an important part of Tianjin "Jinyun" cloud security architecture design, and is the basic security facility to realize the operation of public cloud security business. Through cloud database audit products, we can achieve full-dimensional monitoring of public cloud databases, provide security management tools that integrate security, diagnosis and reporting, provide tenants with security audit of data access, and ensure the security of public cloud data.

Zhonganwei's cloud database audit product will provide access audit function to the tenant database in the public cloud environment, and audit the necessary database traffic in the virtualized environment compared with the private cloud environment in the private network of "Jinyun". Under the condition of high-precision audit capability, it is necessary to minimize the performance consumption of tenants and cloud environment, and its reliability and performance need to meet the needs of "Jinyun" public cloud environment.

II. Solutions

1. Scheme design

Through the deployment of database audit on the cloud platform, a comprehensive audit of data activities is achieved.

The database audit probes are deployed respectively for the database on Jinyun and the database of cloud tenants to achieve a comprehensive audit of the relevant database access of cloud platforms and cloud tenants. By collecting, analyzing and filtering the access behavior of all different users to their own application database, the audit system records the access behavior of the database, and realizes the effect of data access monitoring in the comprehensive audit cloud platform.

VisualSec database comprehensive audit system is mainly composed of flow collection agent, audit log storage, report, risk identification, expansion, management and other modules. The overall design architecture is shown in the following figure.

III. Value of the scheme

Because the database system is a complex software "black box", its visualization degree is very low. It is difficult for a database administrator to tell when data is accessed at any time. This brings great difficulties to business governance. Especially in the cloud environment, the degree of invisibility is even more serious. Data visualization comprehensively monitors data access through a variety of means, and provides rich preset statistical reports to visualize data access and risks in a graphical way, greatly simplifying business governance and improving data security management capabilities.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.