Application Of Security Audit Technology In The Local Financial Information System

With the rapid development of informationization in our country,Financial Manage Information System's scale and the data in computer is growing,security risks are also getting higher and higher.Nowadays,audit in financial industry is basically based on manual,this method make us boring and is inefficient,what's more,it may cause safety problem.As one of important mechanisms that implements network information security,security audit can record user's action,provide important message for audit operation events,and has an important role in constituting information security protecting system.Applying the computer security audit techniques in the financial department and developing security audit system which fit for financial industry will strengthen the security of financial security and have important practical value. The research of security audit technology in our country is just at the beginning,much of these research is about theoretics ,little about application,and less in financial industry.This paper studies the business processes and network safty status of Financial Manage Information System in one city,advances a scheme that fits for the financial industry,implements a Financial Security Audit System in Windows NT platformthis.The system includes four modules:FMIS audit,OS audit,network data monitor,FSAS audit.In the FMIS audit module,this paper bases on business processes,adopts trigger to audit,monitors the performance of FMIS's database.The OS audit module use data mining technology to mine the log message,use Deterministic Finite Automaton audit model to analyse and audit the them.This paper uses WinPcap SDK to capture data packets from network in network monitor module,display network traffic and use voice for alarming when the network traffic is too large.As for the FSAS audit module,it can not only record the successess login events but also the failure ones and analyse them.The innovation of this paper includes:1.Design a solution fit for the financial industry security audit and implement a financial security audit system..2.Use data mining technology with DFA model to handle and audit massive data. These're five chapters in this paper.In chapter one,it introduces the background and the status of security audit in our country,points out the necessity and meanings of computer audit technology applied to financial industry.In chapter two,it introduce the computer security audit methodology,data mining technology,security audit technology and so on.In chapter three,it introduces related knowledge of financial manage information system,analyse the security status of one local FMIS.In chapter four,it advance a scheme of financial security audit.In chapter five,it implement the FSAS and introduce its functions.The last is conclusions.