Research Of Computer Audit Technology And Its Application On Financial System

With the development of finance informatization of China, financial information system is getting larger and larger and it will be faced with more risk. The data of financial bureau is high-grade confident and demands high-security of computer system and application system. This paper proposes a new solution of Finance Security Audit System in the light of financial operation features, which is based on the research of current security audit technology and products.The solution of the Finance Security Audit System is design an integrated security audit platform, which is separated from financial information system. The security audit platform has the functions of both computer system audit and financial data audit. Around the research and implementation of Finance Security Audit System, the following contents are studied in this paper:1. Through investigation and research on the spot, find out the construction tendency of finance bureau informatization, financial operation flow and financial data features. This paper analyses the security status quo of financial system, and find out existed potential safety hazard security through security evaluation and vulnerability scanner, so as to determine the security requirements of financial information.2. Based on the review lots of literatures of domestic and foreign about computer security audit, and summarize the advantages and disadvantages of existed security audit systems, this paper proposes the architecture of Finance Security Audit System.3. Design an audit analysis engine based on data mining through the study and research on computer security audit technology and data mining technology, and discuss the policy of rule library establishment. Focus on the research of audit data collection policy, data standardization policy and data secure storage policy.4. Design an operation audit module based on trigger to collect operation data from financial information system. The integration audit on financial system is based on both operation data and system log.5. Implement a modularized Financial Security Audit System prototype including functions such as Action Record, Action Playback, Authority Audit, Large Amount of Financing Track, Financing Service Condition and other function modules.Finance Security Audit System proposed in this paper has the characteristics of centralized management, intelligent audit, high scalability and etc, which provide enhanced support for auditing financial system security. The achievement in this paper has great significance in developing Gold Finance Project and e-government.