基于知识库的Unix主机配置安全审计软件的设计与实现

摘要

Security audit is important for Unix host security, also for business application which running on Unix host. The paper analyzes configuration security of Unix operating system, according disadvantages of conventional audit method, a Unix host configuration security audit scheme based on knowledge base is proposed. Then the paper gives the implementation of the scheme.%配置安全审计是保证Unix主机安全的重要措施,并进一步为Unix操作系统所承载的业务应用提供了安全保障.本文首先分析Unix操作系统的配置安全和传统的配置安全审计方法,并针对传统方法的不足,提出一种基于可灵活配置的知识库实现Unix操作系统配置安全审计软件的设计方案,最后给出这种方案的具体实现.