摘要
利用Linux操作系统的可装载内核模块技术(LKM),设计与实现了可应用于特定应用环境下的Linux主机综合监控审计系统。系统基于策略实现了对Linux系统运行状态和用户行为的监控审计。采用分布式监控,综合审计管理的运行模式。并结合XML和对象关系技术实现了策略规则和审计数据的统一描述、转换功能,实现了对不同类型的审计数据、策略的统一管理。
This paper presents the design and implement of a monitor and audit system based on LKM.The system monitors the user s action on the Linux system,and the state of the system itself.It is running under the rule of the policies.It offers the distributed monitor and centralized audit.This system use the XML and object-relation technology to describe the policy and audit data in a uniform way,and also implement a method to translate different data format.It offer an plat to management different audit data together.
出处
《计算机安全》
2009年第9期9-11,共3页
Network & Computer Security
基金
中国工程物理研究院重大基金项目(基金号:2006Z0604)
