基于专业系统的敏感操作审计实践

The Practice of Operation Audit for Sensitive Information Based on Professional Systems

敏感信息审计系统是在业务层面对各业务系统的敏感操作进行监视、审计、告警的一套专业系统。互联网的发展促使信息资产成为企业重要的资产,而且网络安全威胁频发导致信息正受到各种威胁。敏感信息审计系统正是对信息资产进行监控和审计的一套专业系统,可实现企业对敏感信息的可视化监控和违规操作的及时发现,实现了对资产的进一步保护。本文从敏感信息全面审计和预警两个方面进行了分析说明。

The audit for sensitive information operation is a set of professional systems used to monitor, audit and to give warnings about sensitive operations of diverse business systems at a business-level basis. Spurred by the development of Internet, information property has become a vital asset for enterprises. Yet the frequent occurrence of network security menaces is bringing about various threats to today＇s information. The audit for sensitive information operation is a set of systems aim at monitoring and auditing information asset. It enables visual monitoring of sensitive information and timely discovery of operations against rules, and further protects the asset. This thesis mainly analyses and illustrates the complete audit and pre-warning of sensitive information.