主機審計記錄分析系統(tǒng)研究與設(shè)計.pdf

1、湖南大學碩士學位論文主機審計記錄分析系統(tǒng)研究與設(shè)計姓名：蔣湘濤申請學位級別：碩士專業(yè)：計算機應(yīng)用技術(shù)指導教師：吳昊20060520碗上學位論定ABSTRACTWilhsystemsecu“tyisbecomingmoreandmoreimportant，auditsystemalsobeeomesaimportantsupplementpartofseeuritvtoolssue魏asVulneiabiliti譬sscannerandi

2、ntrusionde飴ctionsystemOnetheonehand，hhelpssystemgecu“tymanagemenitofindsystemVulnerabiltyef玨cientlyandpreVemsbigseeufityeVe婦tshappeningOntheotherhand，a最ersecurjtyeVenthappened，systemsecuritymaⅡagementcancheckthereasonsof

3、theeVents，西ndVulnerabilitiesandmesourceofattackwi像thehelpofauditsystem，丁hfou醣thew毒yprovidjngthecb8racterofatlaek，auditsys把meanhelptheint翔瞎ioadetec西onsysemthatbasedo虱臌isusodetectlontOdefinenewdetectingmlesMeanwhileaudtsys

4、temalsocan6ndaCtackersundersomecircumst捷nces，itcanbe&tcfiminalactasatoolofcyberc“mecomputerforensicsSOresearchOnauditsystembasedonhostsystemhas鱸eattheo’yandpracticemeaningforimproVingcomputer’ssecurityThispapermainiy內(nèi)cus

5、on哺e∞ns“uetionoftheaud“systembasedonhost，includinggettngauditrecords，器雌1ysigoftheauditre∞fdandbrowning掉snitofditanaly面s，F(xiàn)irst，itdiscussessomekin齜ofaudnsystemmOdeIand曩nalysismethodofcurfentaudit＆nalysissystem，Second，under

6、theguideIineofauditworkbenchconc印tandinconnectionwithdisadvantageofanaly《smethod，whichonlycandoingsomesimplestfingssearchor矗lterngrecordbytjmeconditionandcan’trelatingauditrecordfrOmdifferentaspect，thePaperproposesanewau

7、dnsystemmodeI。whlchbasedonorientobjectanaIysismethod，usingconstructionsimilarassemanlicnetandprescntingtherelafion5hipbyusingauditmetaobjcctsand曲ainobjectsInthisnovelmodel，bythewayofaudlfeeofdparse斟ammaritdeigllsandconst

8、ruc舢玎saudjtfecordpfeproeegsor娟ichc觚conVertingauditrawdataintouniversalformat；italsodevelopssomeaud主tanalysisalgorithmsbasedondifkre眥audiargetSecond，itbuildsabrowningfordispIayauditanalysisresultandtherelatjons11iPofaudnm

9、哦aobjectslhr。ughVisualway。Fin811KthispaperdesjgnssoInete髓stocheckthenewauditsyslemmod“，ResunsproVi如th融“cancOmplctingmostof矗u出trequiresmofee塌ciencycomp8fewithothercurrentaH出tsystemsa孔dremedyingdisadvantageofcurrentauditsy