基于动态网络行为可信度量的安全审计  

Security Audit Based on Dynamic Amount of Network Behavior Trust

作　　者：李伟伟[1] 张涛[1] 林为民[1] 邓松[1] 时坚[1] 汪晨[1] 

机构地区：[1]国网电力科学研究院信息与通信研究所,江苏南京211100

出　　处：《计算机技术与发展》2012年第5期250-253,共4页Computer Technology and Development

基　　金：国家电网公司科技攻关团队项目(SG11034)

摘　　要：安全审计系统作为一种对用户网络行为的有效监督手段,对网络行为的可追溯和可控制起着重要作用。文中提出了一种基于动态网络可信度量的安全审计方法。该方法根据网络的实时日志信息,周期性对其进行数据挖掘生成规则,并将规则应用到数据流的过滤中。根据数据流与规则的匹配情况进行动态的可信度量,使得系统对可信行为和危险行为形成不同的安全访问控制机制。较以前以固定规则应对变化的访问控制和过滤,所提出的方法具有很好的适用性和灵活性。Security audit system plays an important role in user network behavior. It makes sure that the network behavior can be controlled and traced back. It proposed a design of security audit based on dynamic amount of network behavior trust, which periodically gen- erated rules by mining latest logs and applied rules to the date stream filtering. This design generated different security access control mechanism for trusted behavior and risk behavior,based on matching date flow with roles to measure network behavior trust. Comparing to existing systems which made constant rules to respond to mutative access control and filtering, this design had great applicability and flexibility.

关 键 词：数据挖掘 行为可信 安全审计 访问控制 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]