操作系统中安全审计项目测评

摘要

通过安全审计来关注系统和网络日志文件、目录和文件中不期望的改变、程序执行中的不期望行为、物理形式的入侵信息等,用以检查和防止欺骗行为和虚假数据,是保障计算机系统网络安全和本地安全的重要技术,对审计信息的分析可以为计算机系统的责任认定、脆弱性评估、系统恢复、损失评估提供关键性信息,所以审计覆盖范围必须要覆盖到每个数据库用户和操作系统用户.%The security audit pays attention to the system, weblog, directories and files. The security audit is the best way to check and prevent fraud action and false data which pay attention to the system and network security audit log files, directories and files which are changed without expectations, program execution in the desired behavior, the physical form of the intrusion information. The security audit is an important technology to protect the network security and local computer security. Audit analysis provides critical information for computer responsibility confirmation, vulnerability assessment, system recovery, loss assessment. So the security audit must be covered to every operating system user and database user.