一种新型在线数据库审计系统  

New type online database audit system

作　　者：晏明春[1] 李酒[1] 

机构地区：[1]华中科技大学计算机学院,湖北武汉430074

出　　处：《计算机工程与设计》2007年第5期1012-1015,1023,共5页Computer Engineering and Design

基　　金：国家科技中小型制造业资源计划ERP管理系统创新基金项目(03C26214211057)

摘　　要：目前,我国计算机信息系统中普遍使用的是国外厂商的数据库管理系统,其内部操作不透明,无法阻止机密信息泄漏、滥用资源等行为,对于安全相要求较高的部门这一后果更为严重。虽然绝大部分数据库管理系统自身带有审计功能,但是它们都存在审计文件格式复杂,开启审计功能后系统性能下降等弊端。提出了一种新型的在线数据库审计系统的设计与实现方法,该方法采用旁路监听方式实时采集客户端对数据库的操作命令,不必修改现有网络结构,不影响正常业务的运行,而且审计信息格式固定,便于审计数据的事后查询和统计分析。At present, most commonly used DBMS in our country are principally developed by foreign manufacturers. Because of opacity in its internal operation, we can＇t make sure that no secrets leak out. Although most DBMS have the ability of auditing, there are many defects, such as complex audit file format, low capability when audit ability is enabled. A new type database audit system which uses sniffing through a bypass is proposed. It works perfectly without changing existing network architecture and affecting normal business. Its unified audit data files makes querying and statistics more easily.

关 键 词：数据库审计系统 旁路监听 模式匹配 协议分析 词法分析器 语法分析器 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]