桃园区网伺服主机与网路检查系统Version

桃園區網:

伺服主機與網路檢查系統

(Version2.0)中央大學電算中心楊素秋2023.10綱要1.伺服主機與網路檢查系統2.SVRCHKVer-1.0檢測系統3.SVRCHKVer-1.1檢測系統4.SVRCHKVer-2.0檢測系統5.SVRCHK程式及Datatable6.總結1.伺服主機與網路檢查系統沿由系統與網路檢查紀錄表(ISMS認證需求)Tyrc:forISMS認證(2023)2.SVRCHKVer-1.0檢測系統SVRCHK檢測措施檢測次數:1time/dayFileid.by$year/$month/$mday/$srv_name檢測工具Router:pingDNS:dig:wget,socket-portProxy:curlUserInterfaceJSP+Java(Tomcat)3.SVRCHKVer-1.1檢測系統Ver-1.1檢測範圍Tyrc,Ncu_cc,Ncuad,Ncu_rdNCUComputerCenterISMS認證(2023)Ver-1.1檢測措施略同Ver-1.0伺服系統種類大幅增长Router,DNS,,MRTG流量Portal,電子表單,BlackBoard,MS-SQL,MySQLSMTP,PoP3,IMAP,Proxy,News,VMware,LDAP,DHCP,NFS帳號管理,NIS(NetworkInformationSystem)Others3.SVRCHKVer-1.1檢測系統(cont.)檢測工具Router:pingDNS:dig:wget,Nmap(socket-port)Proxy:curl,NmapSMTP,News,pop3:expectMS_SQL,MySQL:expect,NmapDHCP:ping,NmapVMware:Nmap3.SVRCHKVer-1.1檢測系統(cont.)檢測小撇步Servicestatuscollection時間長部分Server回應時間頗長statuscollection時間提早些檢測措施精簡(Nmap)確實(expect,wget,curl)Securityfilter(Transit繞道)問題點(transit?/target?)#!/bin/bashRSYNC=/usr/bin/rsyncLOCALPATH=/home/yang##Susan2023-01-29::NewsTestOK!VAR=$(expect-c"spawntelnet4110#send\"telnet4110\r\"expect+OKsend\"USERcenter7\r\"expect+OKsend\"PASSxxxxxxxx\r\"expect+OKsend\"STAT\r\"expect+OKsend\"QUIT\r\"expect-timeout1")echo"$VAR"Example:SMTPservicedatacollectionscript#!/bin/bashRSYNC=/usr/bin/rsyncLOCALPATH=/home/yang##Susan2023-01-29::NewsTestOK!VAR=$(expect-c"expectyes/nosend\"yes\r\"#expectpassword:send\“XXXXXX\r\"expect\"\\\\$\"send\"telnet140.115.X.X119\r\"send\"help\r\"expect-timeout1")echo"$VAR"Example:Newsservicedatacollectionscript4.SVRCHKVer-2.0檢查系統Ver-2.0改善需求增长檢測次數早/午/晚or每小時一次統計G次數提供細部資訊查詢UserInterface伺服系統由user線上鍵入管理員認證後,自動偵測Database查詢File:$year/$month/$mday->DB4.SVRCHKVer-2.0檢查系統(cont.)Ver-2.0檢測Tyrc,Ncu_cc,Ncuad,Ncu_rd

管理自動化Dynamiccreatedbyuser/managerServerRegisteredbyuserServerconformedbymanager安全性考量SpringSecurityUserauthenticationUserauthorizationDatabase查詢4.ＳVRCHKVer-2.0檢查系統(cont.)SVRCHKVer-2.0檢查系統A.UserLoginSpringSecurityAuthentication(user,passwd,enable)Authorization(role)B.ServerRegisteration{id,hostname,hostip,port,email,creadted}4.ＳVRCHKVer-2.0檢查系統(cont.)C.Servicestatuscollection**Retrieveserverworkinginfo.per-hour{id,hostip,score,retrieval,creadted}Evaluatetheworkingstatus{id,hostip,status,scr:retrie,date,creadted}D.QueryservicestatusISMS報表文献QueryInterface4.SVRCHKVer-2.0檢測系統(cont.)5.SVRCHK程式及DatabaseSpringFramework提供許多API,幫助縮減Web應用系統發展旳效能.SringMVCDatabaseAccess(JDBC,Hibernate,JPA)SecurityFormValidatorFlowControlWebServiceOthers...5.SVRCHK程式及Database(cont.)MysqldatabaseSERVER{Host_Name,Host_IP,Host_Port,Host_Email,CREATED}PSTATUS{STATUS_IP,STATUS_SCORE,STATUS_RETRIEVE,

CREATED}DAY_STATUS:{DAY_IP,DAY_STATUS,DAY_SCORE,

DAY,CREATED}5.SVRCHK程式及Database(cont.)Crontab執行程式svrchk-fetch.javaCollectservicestatusaccording{IP,PORT}svrchk-exec.javaValuatetheservicestatussvrchk-status.javaReportDailyservicestatus5.SVRCHK程式及Database(cont.)JSP網頁accessscriptSvrchk_table.jsp改善Security安全性Modularity模組化Reusability再运用5.SVRCHK程式及Database(cont.)[root@center7-4Data]#ls-l總計56-…#Nmap4.11scaninitiatedSatOct2316:31:102023as:Interestingportson.tw(1):PORTSTATESERVICE53/tcpopendomain#NmaprunpletedatSatOct2316:31:152023–1IPaddress(1hostup)scannedin5.511seconds5.SVRCHK程式及Database(cont.)|2078|1|1|1|2023-10-2515:32:12||2079|33|1|1|2023-10-2515:32:12||2080|3|1|1|2023-10-2515:32:12||2081||1|1|2023-10-2516:32:12||2082|50|0|1|2023-10-2516:32:12||2083|4|0|1|2023-10-2516:32:12||2084|38|1|1|2023-10-2516:32:12||2085|3|1|1|2023-10-2516:32:12||2086|1|1|1|2023-10-2516:32:12||2087|99|1|1|2023-10-2516:32:12||2088|2|1|1|2023-10-2516:32:12||2089||1|1|2023-10-2516:32:12||2090|8|1|1|2023-10-2516:32:12||2091||1|1|2023-10-2516:32:12||2092|12|1|1|2023-10-2516:32:12||2093|1|1|1|2023-10-2516:32:12||2094|33|1|1|2023-10-2516:32:12||2095|3|1|1|2023-10-2516:32:125.SVRCHK程式及Database(cont.)mysql>select*fromDAY_STATUS;|DAY_ID|DAY_IP|STATUS|SCORE|DAY_INFO|DAY_CREATED|+++++++|182||G|23:23|2023-10-26|2023-10-2623:32:43||183|12|G|23:23|2023-10-26|2023-10-2623:32:43||184|1|G|23:23|2023-10-26|2023-10-2623:32:43||185|38|G|23:23|2023-10-26|2023-10-2623:32:43||186|1|G|18:18|2023-10-27|2023-10-2718:32:42||187|8|G|18:18|2023-10-27|2023-10-2718:32:42||188|3|G|18:18|2023-10-27|2023-10-2718:32:42||189|50|NG|0:18|2023-10-27|2023-10-2718:32:43||190|4|NG|0:18|2023-10-27|2023-10-2718:32:43||191||G|18:18|2023-10-27|202