基于云平台的安全审计系统设计与实现  

Design and Realization of Security Audit System based on Cloud Platform

作　　者：孔丹[1,2] 马兆丰[1,2] 蒋铭[1,2] 

机构地区：[1]北京邮电大学信息安全中心,北京100876 [2]北京国泰信安科技有限公司,北京100086

出　　处：《信息安全与通信保密》2013年第10期66-70,共5页Information Security and Communications Privacy

基　　金：国家自然科学基金资助项目(批准号:60803157;90812001;61272519)

摘　　要：针对云平台日志信息的安全审计及安全存储的需求,提出一种云平台的支持审计信息安全存储的审计系统实现方案。提出的安全审计系统由审计信息记录、审计信息签名、审计信息管理3个功能模块组成,采用Web Services、数字签名等关键技术,实现了对用户信息的获取、分析与数据库存储等功能。另外,系统在实现了网络安全审计的功能基础上,通过对数据库表项信息进行元组签名与分片签名结合的方式,保证了数据的安全与可信。与现有的云平台的安全审计系统实现方案相比,该方案安全性和实用性很高,并具有较好的可移植性。For the requirements of security audit and security storage of log information based on cloud platform, an implementation based on cloud platform and in support of audit information security storage is proposed. Security audit system, composed of audit record module, audit information signature module and audit information management module, uses key technologies including Web Services and digital signature to implement the acquisition, analysis, database storage of user information and other functions. In addition, this system, based on implementation of network security function, can ensure the security and credibility of data by implementing individual signature and group signature. The comparison with existing security audit system implementation based on cloud platform indicates that the proposed implementation scheme has fairly high security and practicability, including fairly good transplantability.

关 键 词：审计 安全存储 云平台 

分 类 号：TP311.52[自动化与计算机技术—计算机软件与理论]