信息系统内部安全审计机制

针对目前大量存在的信息系统内部安全问题,提出了基于安全审计和入侵检测技术的信息系统安全审计平台,并具体给出了其内部工作流程和实现机制.鉴于信息系统内部安全的特点,作者提出了建立系统内部人员的个人诚信信息,并将其作为入侵检测的匹配条件之一.针对入侵检测系统,采用了误用检测技术和异常检测技术相结合的方式,将事后审计数据作为训练数据建立入侵检测模型,最终实现对信息系统内部审计信息的实时处理.

Research About Security Auditing in Information System

For the security problems take place inside information systems,this paper presented an auditing system's configuration,which is based on security auditing,and invading detection system.According to the characters about security problems inside information systems,the method of building the personal credit information about system's inner staff was proposed.It was as the matching condition about invading detection.For the invading detection system,the combination of misuse detecting technique and abnormal d...