Research and design of security audit system for compliance

摘要

Security audit plays an important role in information system, but currently there are various deficiencies in the security audit systems. This paper elaborates the concept of compliance audit, and then introduces the system architecture and components of a log-based network security audit system for compliance. In the end, the detailed design of key components and technologies used are emphasized. Application results indicate that this system achieves the compliance requirements and can effectively enhance the security of the system being audited.