多数据库系统中的安全审计策略研究

Strategy of Security Audit in Multidatabase Systems

按照CC准则构造了多数据库系统的安全审计体系结构,描述了各组成部分的功能和安全审计流程,分析了身份认证服务、访问控制服务和安全审计服务三者之间的关系,并提出几种安全审计策略,增强系统的整体安全性。

According to Common Criteria for Information Technology Security Evaluation, this paper constructs a security audit architecture of MDBSs （Multidatabase Systems）, and describes the functions of the constituent elements and securi- ty audit flow, and analyzes the relations among the identity authentication services and the access control services and se- curity audit services, and presents a series of security audit policies to enhance the holistic security of system.