Realization of A Database Security Auditing Forensic Model
Lin Jian-hui, Yang Cha · Microcomputer Information · 2008
A security auditing system could provide direct adoptable electronic evidence in computer crime investigation; its result and ef-fectiveness affected prominently the operation security of database. This paper proposed a security auditing and forensic model based on user' s access pattern. It used intelligent data mining algorithm to abstract the user' s access pattern, thus the system could find the ille-gal behavior according to the result of pattern match. Since the system saved all useful information in an independent file, the digital evi-dence it collected was adoptable.