一个实用审计子系统的设计

针对湖北省电力试验研究院馆藏图书信息管理系统的特点，设计了一个安全，实用的审计子系统．系统的设计原则是：详细记录用户所有符合审计开关所定义的活动，增强对审计数据的有效利用，减小对系统性能的影响并对用户透明．该系统的审计目的是为了监视、记录和控制用户活动，以便检测和判定对系统的恶意攻击和误操作，并且提供日志作为事后追查的证据．应用结果表明，该系统能有效减少非法入侵行为，提高系统的安全性能．

Design of a useful audit subsystem

According to the character of the stock management information system in Hubei electric power testing institute, a secure and practical audit subsystem was carried out, the principles of the design, including to record the users activities detailed, was the audit data, reducing the negative influence upon the whole system and be open to the users, were given. The subsystem could detects the attack on and the misapplication of the system and provide audit log to monitor and control the users behavior if necessary. The practical use of the subsystem showed that it can reduce the amount of the invasion and improve the security of the system.