Windows平台下安全审计技术的探讨与实现  

The Discussion And Implement Of Security Auditing Technology On The Windows

作　　者：潘军[1] 王桂森[1] 李祥和[1] 

机构地区：[1]解放军信息工程大学,郑州450002

出　　处：《微计算机应用》2005年第3期319-322,共4页Microcomputer Applications

摘　　要：简述了安全审计技术对计算机安全的重要性,通过对Windows日志的分析并利用系统API函数替换法和状态转移分析法提出了基于用户行为的审计技术和基于状态转移法的日志审计技术。最后,在状态转移法的理论指导下实现安全日志的轻型审计系统。In this paper, Firstly, we discuss the security auditing is important to the security problems of the computer. Then we analyze the system log, utilize the method of the system API function substitute and the method of the state transition analysis and present the technology of audit based on the user behavior and another technology of audit based on the state transition approaches. Finally, we implement a simple security auditing system based on the theory of state transition approaches.

关 键 词：WINDOWS平台 审计技术 状态转移法 计算机安全 API函数 用户行为 利用系统 审计系统 安全日志 理论指导 分析法 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]