Design and implementation of audit system based on database security control
Zhang Wei-we · Journal of Zhengzhou University of Light Industry · 2015
In view of the drawbacks that internal operations of present database are mostly opaque,which likely causes confidential information leakage and resource abuse,a set of database audit system was proposed. The bypass to monitor was adopted in the system,through traffic grab to the specified port number on the server in the same LAN,network packets could be obtained. And then these captured network packets were analyzed,finally the analyzed audit information would backup to the secure database in a timely manner for search and analysis. The system could effectively ensure the security of database by monitoring the external users access to the database operation,recording operation behavior,and timely feeding back to the auditor controlling the database system security status in real time. The test results showed that the system had good character of effectiveness and real-time.