医院信息系统数据库安全审计方案的探讨

Discussion on the Auditing Plan of Hospital Information System Database Security

医院信息系统稳定安全地运行离不开后台数据库的稳定与安全,在对医院信息系统的后台数据库进行物理与逻辑的安全性以及集群、镜像、日志传送、备份等安全措施进行考虑的同时,数据库安全审计也是一个不容忽视的数据库安全措施。数据库安全审计对于用户行为的监控、安全隐患的检测以及事后追查和分析都有着重要的意义。结合福建省立医院实践情况,对医院信息系统中数据库安全审计方案进行探讨,并介绍了数据库安全审计方案的选择、部署及应用情况。

Whether the hospital information system （HIS） can work safely and stably is depended on the stability and security of background database. Apart from physical and logical security as welt as protection measures to the background database of HIS, including clustering, imaging, log transmission and backup, database security auditing is also an indispensable protection measure. Database security auditing plays an important role in monitoring the performance of user, detecting potential security hazards, as welt as afterward investigation and analysis. Combined with the actual situations in Fujian Provincial Hospital, the paper discussed the auditing plan of background database in HIS and then introduced the selection, arrangement and application of auditing plan for database security.