摘要
至今信息系统审计已进入普及阶段,但应用系统审计对用户行为审计支持不足,无法满足监测审计功能、倒查取证的安全需求。为此文章提出一种适用于多应用、多级互联的应用日志监测方案。该方案以安全审计技术规范为核心,在部署应用系统审计手段的基础上,通过应用日志监测系统实现审计功能监测和日志倒查取证。
Since the information systems audit has entered the popularization stage, however, application system audit on user behavior is insufficient. It couldn＇t meet security requirements needs of monitoring function of auditing and forensics. In this paper, provide a scheme for monitoring application log which apply for multiple applications, multistage interconnecting environment. In this scheme, the security audit specifications as the core, make use of the monitoring system for application log to realize monitoring function of auditing and forensics, which based on the deployment of application systems audit means.
出处
《信息网络安全》
2012年第8期170-172,共3页
Netinfo Security
基金
国家863计划项目[2009AA01Z437
2009AA01Z439]
关键词
信息安全
安全审计
监测
information security
security audit
monitoring
