CN105847222A - Graphic auditing method and device and electronic device - Google Patents
Graphic auditing method and device and electronic device Download PDFInfo
- Publication number
- CN105847222A CN105847222A CN201510019074.4A CN201510019074A CN105847222A CN 105847222 A CN105847222 A CN 105847222A CN 201510019074 A CN201510019074 A CN 201510019074A CN 105847222 A CN105847222 A CN 105847222A
- Authority
- CN
- China
- Prior art keywords
- graphical
- display information
- coding
- graphical display
- record
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Landscapes
- User Interface Of Digital Computer (AREA)
- Information Transfer Between Computers (AREA)
Abstract
The embodiment of the invention provides a graphic auditing method and device and an electronic device. The graphic auditing method comprises following steps of obtaining operation contents of graphic operations carried out on a target device by a user, wherein the operation contents comprise graphic display information graphically displayed on the target device; generating indexable codes according to the graphic display information; and positioning the graphic display information according to the indexable codes. According to the embodiment of the method and the devices, the auditing efficiency of the graphic operations can be improved.
Description
Technical field
The present embodiments relate to audit field, particularly relate to a kind of graphical auditing method, device and electronics
Equipment.
Background technology
Server for remote management is primarily present Liang great camp, and a class is with unix system, network system as generation
The character mode of table remotely manages, such as Telnet, SSH, FTP etc.；Another kind of is with WINDOWS
System is graphical operation (visualization) management of representative, such as RDP (Remote Desktop Protocol/
Remote desktop), Citrix ICA, VNC etc..Along with information security technology develops, audit of information security day
Becoming important, the change for the data in enterprise key information assets (server key) needs omnidistance examining
Meter trace technology is supervised.Internal Control Audit needs these long-distance management maintenance operation behaviors are carried out phase exactly
The supervision answered and specification.
The audit that character mode remotely manages can be by the mode such as daily record, packet capturing, by operating process with text
Mode is recorded, and is then carried out fast search, inquires about, positions and alert and corresponding execution the such as blocking-up is arranged
Execute, and the audit of graphical operation is because its particularity, is a difficult point all the time.
For Mu Qian, the counter-measure of graphical operation audit mainly has following several:
1, screenshotss software or plug-in unit are installed on the server, record operation content by the way of record is shielded,
Restoring operation content can be carried out by video playback afterwards.
2, by network sniffer " packet capturing " mode, the packet that all-network accesses is recorded, so
Afterwards by data packet analysis, can excavate and reduce a part of relevant information.
3, by " fort machine " mode, as third party's logging device, all clients first log in "
Fort machine ", then log in goal systems again by " fort machine ", " fort machine " is shielded by record or
Person's packet capturing mode records the behavior of operation, carrys out restoring operation content by video playback afterwards.
All there are some problems in existing several technology, therefore in true environment, use can be restricted, no
Audit deterrent force and efficient post-mordem forensics ability can be given full play to.
The first technology, installs screenshotss software or plug-in unit on the server.The resource of server is of great value,
Installing these softwares and can significantly affect server performance, affect server stability, record screen recorded amounts is very big,
Need substantial amounts of hard drive space in server local storage, huge Netowrk tape can be taken by the network storage
Width, when number of servers is a lot, this technology almost cannot use.It addition, server is typically to install
In the frame of machine room, the state being in screen protection in 24 hours, record screen mode differs and records truly surely
Remotely operate the behavior of server.
The second technology, carries out record by network sniffer " packet capturing " mode.This mode can only record
Agreement in plain text, for some unencrypted graphic operation agreement, such as VNC can be effective, but for
The graphics protocols of encryption, such as RDP, ICA etc. are helpless.Additionally network sniffer " packet capturing " mode
Itself there may be packet loss, data are imperfect, and in the case of data volume is huge, the plan generally used
It is slightly sampling packet capturing, more it cannot be guaranteed that comprehensive record of data.
The third technology, by " fort machine " mode as third party's logging device.The work of this mode
Principle is to be initiated to be connected to " fort machine " by client, then is initiated to be connected to destination service by " fort machine "
Device.In order to guarantee recording geometry operation content, generally there are two kinds of solutions, 1, be at " fort machine "
The first technology of upper employing, this scheme exist with the first technology as problem, 2, be at " fort machine "
On carry out " go-between " " packet capturing " analyze, can be reduced by packet for cryptographic protocol, to scheme
Shape playback mode recovered part associative operation information.
In the 2nd scheme of the third technology, can partly solve that record operation content carrying out plays back asks
Topic, i.e. the record of graphical operation, but there is presently no superior technique for these graphical operations
Record carries out corresponding graphical operation audit.Because under graphic operation environment, operation every day will produce a large amount of
Video playback data, if these data recorded need artificial playback mode to go one by one apparently to examine
Meter is unpractical, if the most such substantial amounts of data go playback one by one, it would be desirable to be difficult to bear
Manpower and time；On the other hand by manually going to check it is inaccurate one by one, it is impossible to ensure whether have
Omit.
The most several technology, are mainly in the record solving graphical operation and play back this aspect,
After be required to, by artificial playback " record screen " data that information uses these to record, namely have to pass through
Artificial playback just can navigate to corresponding graphical operation record, and audit efficiency is low.
The most also there are some technology, on the basis of record " record screen/video playback ", carried out some technology
Improve, it is also desirable that solve the graphical audit function recording result.Such as, at special thin client
Client on provide the function such as " Mark " or " Tag ", when operate some graphical operation time, by
Operator's recorded content voluntarily, citing is exactly, if revising a user profile by Graphic Terminal,
Just " Mark " once " amendment user profile ", just can come quickly by searching for this information so later
Inquire about and navigate to operate accordingly content.In this mode needs handmarking in operation to operate
Hold, more just can navigate to corresponding graphical operation record, audit efficiency by the operation content of handmarking
Low.
Summary of the invention
The purpose of the embodiment of the present invention is to provide a kind of graphical auditing method, device and electronic equipment, to carry
The efficiency of high graphical operation audit.
The embodiment of the present invention provides a kind of graphical auditing method, including:
Obtaining user and target device is currently patterned the operation content of operation, described operation content includes
The graphical display information of graphic software platform is carried out on described target device；
According to described graphical display information, generation can index coding；
Index coding according to described, position described graphical display information.
Preferably, the operation content that described acquisition user is currently patterned operation to target device includes:
At an equipment by a packet by the network readezvous point between described client and described destination server
Before agency agreement connection is transmitted to described destination server, parse in described operation from described packet
Hold, wherein, described packet by a client according to user's remote access request to described destination server
Information is generated and is connected by described network readezvous point agency agreement and is sent to described equipment.
Preferably, described graphical display information includes the text message represented with pixel, described indexes volume
Code includes character code, and described according to described graphical display information, generation can index coding and include:
Described text message is mapped as identifier dot matrix；
Described identifier dot matrix is mapped as described character code.
Preferably, coding described in described basis, can be indexed, position described graphical display information and include:
Coding and described graphical display information can be indexed described in corresponding record；
When coding can be indexed described in user selects, according to indexing coding and described figure described in corresponding record
Shapeization display information, positions described graphical display information.
Preferably, also include:
When navigating to described graphical display information, according to described graphical display information, enterprising at screen
Row figure shows.
The embodiment of the present invention also provides for a kind of graphical audit device, including:
Acquisition module, is currently patterned the operation content of operation, institute for obtaining user to target device
State operation content and include carrying out on described target device the graphical display information of graphic software platform；
Generation module, for according to described graphical display information, generation can index coding；
Locating module, for indexing coding according to described, positions described graphical display information.
Preferably, described acquisition module includes:
Resolution unit, for an equipment by a packet by described client and described destination server it
Between network readezvous point agency agreement connect be transmitted to described destination server before, from described packet resolve
Go out described operation content, wherein, described packet by a client according to user to described destination server
Remote access request information is generated and is connected by described network readezvous point agency agreement and is sent to described equipment.
Preferably, described graphical display information includes the text message represented with pixel, described indexes volume
Code includes that character code, described generation module include:
First map unit, for being mapped as identifier dot matrix by described text message；
Second map unit, for being mapped as described character code by described identifier dot matrix.
Preferably, described locating module includes:
Record unit, for indexing coding and described graphical display information described in corresponding record；
Positioning unit, for user select described can index coding time, according to can rope described in corresponding record
Draw coding and described graphical display information, position described graphical display information.
Preferably, also include:
Display module, for when navigating to described graphical display information, believes according to described graphic software platform
Breath, carries out figure on screen and shows.
The embodiment of the present invention also provides for a kind of electronic equipment including above-described graphical audit device.
From the above it can be seen that the embodiment of the present invention at least has the advantages that
Need not manual operation and just can position graphical userization operation content, improve graphical operation audit
Efficiency.
Accompanying drawing explanation
Fig. 1 represents the flow chart of steps of a kind of graphical auditing method that the embodiment of the present invention provides；
Fig. 2 A represents fort machine working method schematic diagram；
Fig. 2 B represents that network readezvous point acts on behalf of (TProxy) pass-through mode schematic diagram；
Fig. 3 A, Fig. 3 B represent that employing record screen mode carries out showing in reduction on data record and screen respectively
Illustration；
Fig. 3 C, Fig. 3 D represent that employing protocal analysis mode carries out reduction on data record and screen respectively
Exemplary plot；
Fig. 4 represents the search example figure of the better embodiment of the embodiment of the present invention；
Fig. 5 represents the structured flowchart of a kind of graphical audit device that the embodiment of the present invention provides.
Detailed description of the invention
For making the purpose of the embodiment of the present invention, technical scheme and advantage clearer, below in conjunction with accompanying drawing and
The embodiment of the present invention is described in detail by specific embodiment.
Fig. 1 represents the flow chart of steps of a kind of graphical auditing method that the embodiment of the present invention provides, with reference to figure
1, the embodiment of the present invention provides a kind of auditing method, comprises the steps:
Step 101, obtains user and target device is currently patterned the operation content of operation, described behaviour
The graphical display information carrying out graphic software platform on described target device is included as content；
Step 102, according to described graphical display information, generation can index coding；
Step 103, indexes coding according to described, positions described graphical display information.
Visible, by the way, it is not necessary to manual operation just can position graphical userization operation content, carries
The high efficiency of graphical operation audit.
Wherein, described target device is such as: destination server.
Described graphical display information is such as: include the text message represented with pixel.Described text message example
Such as information such as English alphabet, Chinese character, other words.Described text message can be each according to staying on screen
The pixel value that location of pixels shows represents, or can also represent according to the mode of drawing instruction.Here,
Drawing instruction is such as: draw rectangle frame or with redness filling etc..Described index encodes such as: include that character is compiled
Code.Character code is such as: ANSI or GB2312 etc. encode.
Described graphical display information is included to the text message represented with pixel, the described coding that indexes wrap
Including character-coded situation, described according to described graphical display information, generation can index coding and comprise the steps that
Described text message is mapped as identifier dot matrix；
Described identifier dot matrix is mapped as described character code.
In the embodiment of the present invention, can index coding described in described basis, positioning described graphical display information can
Including:
Coding and described graphical display information can be indexed described in corresponding record；
When coding can be indexed described in user selects, according to indexing coding and described figure described in corresponding record
Shapeization display information, positions described graphical display information.
Here, during for representing according to the mode of drawing instruction, and according to staying in each picture on screen
The pixel value of element position display represents to be compared, and can save the data volume of record in a large number, thus save audit
Required resource, does not interferes with performance and the stability of server.
In the embodiment of the present invention, in order to support playback, may also include that
When navigating to described graphical display information, according to described graphical display information, enterprising at screen
Row figure shows.
In the embodiment of the present invention, described graphical operation can be that user is directly carried out on destination server,
Can also be that user is carried out by the way of remote access destination server in client.For latter feelings
Condition, client can be remotely accessed by fort machine, and correspondingly, described operation content can be from fort
Obtaining in machine, and be connected owing to fort machine is set up respectively with client and server, needs are two connections
Between carry out data conversion, thus the operation content thus obtained may be sufficiently complete and accurate.In view of this,
In order to by the content of transmission between the most verily record client and server, client can also be passed through
Possessing network readezvous point and act on behalf of the equipment of forwarding capability to remotely access destination server, the most described acquisition user works as
The front operation content that target device is patterned operation comprises the steps that
At an equipment by a packet by the network readezvous point between described client and described destination server
Before agency agreement connection is transmitted to described destination server, parse in described operation from described packet
Hold, wherein, described packet by a client according to user's remote access request to described destination server
Information is generated and is connected by described network readezvous point agency agreement and is sent to described equipment.
Described equipment is such as: network readezvous point proxy server.
For illustrating clearer by the embodiment of the present invention, provide below the preferable real of the embodiment of the present invention
Execute mode.
This better embodiment relates to server for remote management and audit field.
This better embodiment provides the method for a kind of Under Network Environment shapeization operation audit.
For the first three technology illustrated in background technology, the post-mordem forensics as a certain event has certain
Act on, but automatically identifying and audit for graphical operation content, during incident or before the accident happened with regard to automatically
Monitoring in real time identifies and early warning, fast search and location afterwards, does not the most provide corresponding technical solution.
For the technological improvement illustrated in background technology, have certain effect, but there is also Railway Project:
1, for malice in violation of rules and regulations, the operator carrying out respective record unfaithfully can not record and find in time, 2,
Can not find for maloperation or other mistakes and omissions behaviors, 3, for non-thing row record arbitrarily or not
County magistrate's part cannot be carried out searching for accordingly and positioning.
This better embodiment is exactly to provide firstly the problem that a kind of method solves graphically to record, then
Data are graphically recorded for these that have employed this method record, it is provided that a kind of automatically search efficiently
Rope, the method identifying, position and auditing.
General introduction is exactly simply, and the technical notes graphical operation content acted on behalf of by network readezvous point is dynamically assisted
Business's cryptographic protocol thus realize the complete parsing of agreement, then by the data of graphical operation such as image, position,
The information such as mouse, corresponding with information such as the words that can search for associate, set up by indexed search pretreatment
" behavior analysis data base ", thus realize automatically identifying and audit of graphical operation.
This technology can realize the most prior predefined graphic operation behavior is quickly identified, detects and positioned.
Such as, for deleting the audit of file operation under conventional characters mode of operation, it is simply that search " Del ", " rm "
Deng order, and under patterned operation, it may be possible to mouse have selected certain file, then uses keyboard
" Shift+Del " seamless slash is deleted, the behavior of this compound mode, in this better embodiment,
Can search quickly and easily, position, Real-time Alarm, even block its operation behavior.
1, this better embodiment is firstly the need of the complete documentation using network readezvous point agent skill group to carry out agreement,
Mainly realize on the premise of solving cryptographic protocol record, record protocol content of keeping intact, this and " fort
Base machine " working method be very different.
As shown in Figure 2 A, " fort machine " is to be initiated to connect to " fort machine ", to " fort by client
Machine " termination, then it is connected to server termination by " fort machine " initiation to server, have two differences even
Connect.Content in connecting for these two cannot accurately be mated and analyze, because in theory, from client
End uses agreement A to " fort machine ", and can use agreement B from " fort machine " to server, two
Connection can be diverse agreement.Network readezvous point agent skill group in this better embodiment has weight with this
Big difference, first the content connected for same carries out loyal record, the most just can carry out complete and smart
True parsing and analysis.Can refer to Fig. 2 B.
This better embodiment have employed network readezvous point act on behalf of pass-through mode and be encrypted the negotiation of agreement, enter
The forwarding of row packet and record, carry out analysis and the storage of packet.
2, needing the second thing done in this better embodiment is reducing recorded content in former mode.
The content of graphical operation is usually expressed as the movement of mouse on screen, the change of picture, and the input of keyboard is defeated
Go out, in additionally some content includes the transmission of audio signal, file and the transmission of data, clipbook
Hold etc..We are divided into two large divisions these contents, before a part be master data, after a part
For growth data, meanwhile, growth data is likely to include the extension that a part is master data.
First master data from the point of view of us, the method going back raw content here has with video playback or record screen broadcasting
The most different.Video or record screen play need not to understand picture implication, it is only necessary to according to record
Data, pointwise is drawn a portrait element on screen, is filled up picture the most frame by frame.And the side in this better embodiment
Method is record network packet, analyzes agreement, then becomes graphical operation according to protocol instructions reduction, because of
This record takes up room and wants much less, much more efficient, and if carried out labor, it is possible to resolve completely
The implication of agreement.Record screen mode record is the pixel of each point of dot matrix, colouring information in each frame picture
Deng, and this better embodiment is the original drawing instruction of record, such as, draw rectangle frame, fill out with redness
Fill, etc..As a example by shown in Fig. 3 A, 3B, the data of record screen mode record are pixels 1, and 1 position is yellow
Color, 1,2 position is yellow, and 1,3 position is red, and Isosorbide-5-Nitrae position is blue, and 1,5 position is blue, 2,1
Position is yellow ...；Correspondingly, on screen during reduction, performing 1, the point of yellow is drawn in 1 position,
The point of yellow is drawn in 1,2 position, and 1, red point is drawn in 3 positions, draws blue point in Isosorbide-5-Nitrae position, 1,5
Blue point is drawn in position, and 2, the point of yellow is drawn in 1 position ....And in this better embodiment of correspondence
Protocal analysis mode, with reference to Fig. 3 C, 3D, the master data recorded is then pixel 1,1 position to 2,2
Yellow rectangle is drawn in position, and 1, picture red rectangle is put in 3 positions to prosposition, and in Isosorbide-5-Nitrae position to 7,5 positions are drawn
Blue rectangle, 3,1 position to 7,3 positions picture red rectangle, this mode data volume is little.In Fig. 3 B
Growth data be Tong Bu with master data, but not necessarily show on screen.In Fig. 3 B,
On screen during reduction, carry out mating and indexing pretreatment with master data by growth data, by patterned mould
Intend data to be digitized processing, charge to behavior analysis data base.
Then growth data from the point of view of us, the master data being previously mentioned is primarily used in processing draw
Deng, and growth data might not all show on screen, we are referred to as the growth data of transmission
One specific channel.Containing substantial amounts of information in specific channel, these information are Tong Bu with screen-picture,
According to these information analysiss with, it is possible to growth data is realized and the associating of basic data picture, such that it is able to
Realize the analog picture shown on screen is changed into digitized information, it is simple to retrieval location etc..Therefore exist
Here, we are by while picture analysis and process playback of data, and pretreatment to be indexed, by simulation
Image information is changed in specific channel represented by synchronization growth data, can be by the information of digitized description.
After having carried out complete sufficiently protocal analysis and accurately having mated, although growth data is not on screen-picture
Mode of graphically changing shows, but these data can corresponding and pretreatment index information, it is provided that after giving
Continuous audit analysis uses.
3, this part teach how to realize graphical operation search, inquire about, the audit such as location.With mesh
Popular protocol RDP (Remote Desktop Protocol, the Microsoft of front Under Network Environment shapeization operation
RDP) as a example by, by parsing and pretreatment to agreement bottom in part 2, we
Can accomplish, the text message such as the English alphabet that represents with pixel, Chinese character, other words, by certain side
Formula encodes, and then these is encoded in the binary data of an identifier (Glyph),
All of Glyph leaves in a relief area, when drawing word, changes buffering by changing to quote the most every time
The index in district finds this figure.
Then, according to the inversion of this mode, we achieve a kind of matching process, can be quickly often
Individual Glyph is reduced to should the coding of Glyph character: such as ANSI coding or GB2312 coding；Warp
Crossing after processing with upper type, in the figure conversation recording of simulation, synchronize correspondence i.e. may occur in which a large amount of numeral
The searchable content of text changed.As a example by shown in Fig. 4, by the pixel-map of " menu " two word it is
Glyph dot matrix, then Glyph dot matrix is mapped as the codings such as ANSI coding or GB2312, then will be mapped as
Coding as the index of " menu " represented by pixel.
According to the method in this better embodiment, for Glyph in graphics protocols mate accordingly with
Index, can quickly search, position the content of graphical operation.
In this better embodiment, make full use of the side of data transmission in existing graphical network operating protocol
Method, proposes a kind of back mapping method from figure to word.The Glyph in growth data is used to carry out figure
As the code index of corresponding word, thus realize graphic operation audit, not only can graphically play back, Er Qieke
By search, the location of word key word mode；Network readezvous point agency refer to record former client completely faithfully
And the content of transmission between server, the data of the manner record can be completely reproduced up all operations behavior at that time,
So all original Glyph data of guarantee record, just can realize Glyph is completed figure to word
Mapping；Record data protocol original contents rather than screen content, then restore screen by protocal analysis
Curtain content, data volume ratio " record screen " mode of record is much smaller, is the audited premise of graphical operation.
The technological merit of this better embodiment includes but not limited to:
1, use the Glyph in growth data to carry out the code index of image correspondence word, thus realize figure
Shape operation audit, not only can graphically play back, and can pass through the search of word key word mode, location,
There is advance compared with can only playing back " record screen " mode that can not search for, there is no other graphical auditing methods
Comparable.Additionally with background technology is mentioned " Mark " operation content, scan for the most again comparing, this side
Method need not carry out in advance any definition and record, can be directly realized by the graphical operation agreements such as RDP, ICA
Under search.
2 with the record of " fort machine " mode compared with playback, the data of this better embodiment record are more
For comprehensively and be loyal to primitiveness, the corresponding relation of such guarantee reduction Glyph data and coding.
3 compared with the graphical operation audit of " record screen " mode, the data of this better embodiment record
Measure much smaller, true existing when the content restored is operation.And need not pacify on the server
Fill any software, do not interfere with performance and the stability of server.
Fig. 5 represents the structured flowchart of a kind of graphical audit device that the embodiment of the present invention provides, with reference to Fig. 5,
The embodiment of the present invention also provides for a kind of graphical audit device, including:
Acquisition module 501, is currently patterned in the operation of operation target device for obtaining user
Holding, described operation content includes the graphical display information carrying out graphic software platform on described target device；
Generation module 502, for according to described graphical display information, generation can index coding；
Locating module 503, for indexing coding according to described, positions described graphical display information.
Visible, by the way, it is not necessary to manual operation just can position graphical userization operation content, carries
The high efficiency of graphical operation audit.
In the embodiment of the present invention, described acquisition module 501 comprises the steps that
Resolution unit, for an equipment by a packet by described client and described destination server it
Between network readezvous point agency agreement connect be transmitted to described destination server before, from described packet resolve
Go out described operation content, wherein, described packet by a client according to user to described destination server
Remote access request information is generated and is connected by described network readezvous point agency agreement and is sent to described equipment.
In the embodiment of the present invention, described graphical display information can include the text message represented with pixel, institute
State and can index coding and can include that character code, described generation module 502 comprise the steps that
First map unit, for being mapped as identifier dot matrix by described text message；
Second map unit, for being mapped as described character code by described identifier dot matrix.
In the embodiment of the present invention, described locating module 503 comprises the steps that
Record unit, for indexing coding and described graphical display information described in corresponding record；
Positioning unit, for user select described can index coding time, according to can rope described in corresponding record
Draw coding and described graphical display information, position described graphical display information.
In the embodiment of the present invention, may also include that
Display module, for when navigating to described graphical display information, believes according to described graphic software platform
Breath, carries out figure on screen and shows.
The embodiment of the present invention also provides for a kind of electronic equipment, described electronic equipment include above-described graphically
Audit device.Described electronic equipment is such as: can be with network readezvous point proxy server.
Claims (11)
1. a graphical auditing method, it is characterised in that including:
Obtaining user and target device is currently patterned the operation content of operation, described operation content includes
The graphical display information of graphic software platform is carried out on described target device；
According to described graphical display information, generation can index coding；
Index coding according to described, position described graphical display information.
Graphical auditing method the most according to claim 1, it is characterised in that described acquisition user
The current operation content that target device is patterned operation includes:
At an equipment by a packet by the network readezvous point between described client and described destination server
Before agency agreement connection is transmitted to described destination server, parse in described operation from described packet
Hold, wherein, described packet by a client according to user's remote access request to described destination server
Information is generated and is connected by described network readezvous point agency agreement and is sent to described equipment.
Graphical auditing method the most according to claim 1, it is characterised in that described graphical aobvious
Show that information includes that the text message represented with pixel, the described coding that indexes include character code, described basis
Described graphical display information, generation can index coding and include:
Described text message is mapped as identifier dot matrix；
Described identifier dot matrix is mapped as described character code.
Graphical auditing method the most according to claim 1, it is characterised in that described in described basis
Coding can be indexed, position described graphical display information and include:
Coding and described graphical display information can be indexed described in corresponding record；
When coding can be indexed described in user selects, according to indexing coding and described figure described in corresponding record
Shapeization display information, positions described graphical display information.
Graphical auditing method the most according to claim 1, it is characterised in that also include:
When navigating to described graphical display information, according to described graphical display information, enterprising at screen
Row figure shows.
6. a graphical audit device, it is characterised in that including:
Acquisition module, is currently patterned the operation content of operation, institute for obtaining user to target device
State operation content and include carrying out on described target device the graphical display information of graphic software platform；
Generation module, for according to described graphical display information, generation can index coding；
Locating module, for indexing coding according to described, positions described graphical display information.
Graphical audit device the most according to claim 6, it is characterised in that described acquisition module
Including:
Resolution unit, for an equipment by a packet by described client and described destination server it
Between network readezvous point agency agreement connect be transmitted to described destination server before, from described packet resolve
Go out described operation content, wherein, described packet by a client according to user to described destination server
Remote access request information is generated and is connected by described network readezvous point agency agreement and is sent to described equipment.
Graphical audit device the most according to claim 6, it is characterised in that described graphical aobvious
Show that information includes that the text message represented with pixel, the described coding that indexes include character code, described generation
Module includes:
First map unit, for being mapped as identifier dot matrix by described text message；
Second map unit, for being mapped as described character code by described identifier dot matrix.
Graphical audit device the most according to claim 6, it is characterised in that described locating module
Including:
Record unit, for indexing coding and described graphical display information described in corresponding record；
Positioning unit, for user select described can index coding time, according to can rope described in corresponding record
Draw coding and described graphical display information, position described graphical display information.
Graphical audit device the most according to claim 6, it is characterised in that also include:
Display module, for when navigating to described graphical display information, believes according to described graphic software platform
Breath, carries out figure on screen and shows.
11. 1 kinds of electronic equipments, it is characterised in that include that right arbitrary in claim 6 to 10 such as is wanted
Seek described graphical audit device.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510019074.4A CN105847222B (en) | 2015-01-14 | 2015-01-14 | A kind of graphical auditing method, device and electronic equipment |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510019074.4A CN105847222B (en) | 2015-01-14 | 2015-01-14 | A kind of graphical auditing method, device and electronic equipment |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN105847222A true CN105847222A (en) | 2016-08-10 |
| CN105847222B CN105847222B (en) | 2019-04-23 |
Family
ID=56579928
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201510019074.4A Active CN105847222B (en) | 2015-01-14 | 2015-01-14 | A kind of graphical auditing method, device and electronic equipment |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN105847222B (en) |
Cited By (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107948572A (en) * | 2017-11-21 | 2018-04-20 | 深圳竹云科技有限公司 | A kind of protocol level record screen back method |
| CN112422865A (en) * | 2020-11-05 | 2021-02-26 | 杭州米络星科技(集团)有限公司 | User access monitoring method and system |
| CN114253635A (en) * | 2020-09-10 | 2022-03-29 | 网银在线（北京）科技有限公司 | Data acquisition method and device, feature determination method and device and electronic equipment |
| CN115086188A (en) * | 2022-07-22 | 2022-09-20 | 深圳竹云科技股份有限公司 | Graph operation and maintenance playback method and device and electronic equipment |
Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103258021A (en) * | 2013-05-03 | 2013-08-21 | 杭州安恒信息技术有限公司 | Character terminal feature data extraction method based on behavioral analysis |
| CN104125304A (en) * | 2014-08-13 | 2014-10-29 | 北京华夏威科软件技术有限公司 | Session-level application auditing method and system |
-
2015
- 2015-01-14 CN CN201510019074.4A patent/CN105847222B/en active Active
Patent Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103258021A (en) * | 2013-05-03 | 2013-08-21 | 杭州安恒信息技术有限公司 | Character terminal feature data extraction method based on behavioral analysis |
| CN104125304A (en) * | 2014-08-13 | 2014-10-29 | 北京华夏威科软件技术有限公司 | Session-level application auditing method and system |
Cited By (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107948572A (en) * | 2017-11-21 | 2018-04-20 | 深圳竹云科技有限公司 | A kind of protocol level record screen back method |
| CN114253635A (en) * | 2020-09-10 | 2022-03-29 | 网银在线（北京）科技有限公司 | Data acquisition method and device, feature determination method and device and electronic equipment |
| CN112422865A (en) * | 2020-11-05 | 2021-02-26 | 杭州米络星科技(集团)有限公司 | User access monitoring method and system |
| CN115086188A (en) * | 2022-07-22 | 2022-09-20 | 深圳竹云科技股份有限公司 | Graph operation and maintenance playback method and device and electronic equipment |
Also Published As
| Publication number | Publication date |
|---|---|
| CN105847222B (en) | 2019-04-23 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US8495078B2 (en) | System and method for abstraction of objects for cross virtual universe deployment | |
| EP1764744A2 (en) | Streaming geometry data using a quasi-pyramidal structure | |
| CN105260170B (en) | A kind of accident deducing manoeuver method and system based on case | |
| US20170286449A1 (en) | System for Connecting Computer Dashboards with Geographic Information Systems | |
| CN105847222A (en) | Graphic auditing method and device and electronic device | |
| CN110633436B (en) | Visual and user-defined panoramic editing method, system, storage medium and equipment | |
| CN103973781A (en) | Method and system for monitoring screen based on proxy server | |
| Shrestha et al. | Storygraph: Extracting patterns from spatio-temporal data | |
| CN106713494B (en) | Intelligent auditing method and device | |
| CN108133024A (en) | Towards the geographical spatial data service integration method of the dynamic configuration of mobile client | |
| Garae et al. | Visualization and data provenance trends in decision support for cybersecurity | |
| WO2014051240A1 (en) | Font processing method for maintaining electronic document layout | |
| Pödör et al. | Industrial IoT techniques and solutions in wood industrial manufactures | |
| Erbacher et al. | Visualization in detection of intrusions and misuse in large scale networks | |
| JP2016057920A (en) | Drawing display device, drawing display method, and drawing display program | |
| CN110309239B (en) | Visual map editing method and device | |
| US10542176B2 (en) | Enhancing graph visualization with supplemental data | |
| CN117112702A (en) | Service rapid processing system for long and large bridge tunneling scene | |
| Wolthusen | GIS-based command and control infrastructure for critical infrastructure protection | |
| CN113436320B (en) | 3D model generation system and method based on IFC model file | |
| Wang et al. | [Retracted] Information Steganography Technology of Optical Communication Sensor Network Based on Virtual Reality Technology | |
| CN111027293B (en) | Mobile office method, device and system | |
| Huang et al. | Interactive visualization for 3D pipelines using Ajax3D | |
| US11765015B2 (en) | Network management apparatus, method, and program | |
| CN111176621B (en) | Virtual maintenance training platform development system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |