一种多层取证的电子商务安全审计系统

A Security Audit System for E-commerce Using Multi-layer Forensics

电子商务在现代经济生活中扮演着越来越重要的角色,但同时也遭受着各种的攻击和不安全因素的威胁。而安全审计能提供事后的侦察和取证应用,它是商务系统安全不可或缺的环节。该文针对以往审计系统数据源不充分的缺点,设计并实现了一种多层取证的分布式、全方位的安全审计系统。该系统的审计全面,可信度强,能有效地评估电子商务系统的安全状况,给电子商务提供安全的保障。

E-Commerce is playing a more and more important role in today's economic life. Meanwhile, it is suffering from a variety of threats. As security audit can provide ex-post reconnaissance and proofs, it is an essential part for the security of E -Commerce. Aiming at making up the deficiencies of former security audit systems of which data sources were not sufficient, we designed and implemented a distributed and full -scale system using multi -layer forensics which can provide a comprehensive and reliable audit. The system can assess the security status efficiently and can provide secure safeguard for E-commerce.