Design and Implement of Monitor and Audit System
Weifeng Zhao · Computers & Security · 2009
This paper presents the design and implement of a monitor and audit system based on LKM.The system monitors the user's action on the Linux system,and the state of the system itself.It is running under the rule of the policies.It offers the distributed monitor and centralized audit.This system use the XML and object-relation technology to describe the policy and audit data in a uniform way,and also implement a method to translate different data format.It offer an plat to management different audit data together.