A Framework for Database Auditing
A Framework for Database Auditing
复制标题
数据库审计框架
DOI：
10.1109/iccit.2009.207
复制
发表时间：
2009
期刊：
影响因子：
--
通讯作者：
Qiang Huang
中科院分区：
文献类型：
--
作者：
Lianzhong Liu;Qiang Huang
数据库审计可以增强数据库的安全性。在本文中，我们提出了一个框架的数据库审计，它记录数据库活动通过分析网络流量，执行审计分析，通过事件相关性和生成警报，如果异常或违反安全规则被检测到。与数据库中的原生审计机制相比，该方法具有对数据库或访问数据库的应用程序的性能零影响的明显优势，并且使用第三方审计组件符合职责分离的原则。
Database auditing can help strengthen the security of database. In this paper, we present a framework of database auditing, which log the database activities through analyzing network traffic, execute audit analysis through event correlation and generate alarms if an anomaly or a violation of security regulations is detected. Compared with native auditing mechanism in database, our approach has an obvious advantage of providing zero-impact to the performance of the database or the applications that access it. In addition, using third-party auditing component complies with the principle of separation of duties.