Research And Implementation Of Accountability System In Multi-domain Environment

With the development of information technology, while the internationalization, socialization and personalization of information network bring convenience, efficiency and information sharing to people, also bring many information security problems, how to ensure network security become the focus of attention. Accountability, being one of the most important means of network security is a crucial way to realize the verification and accountability of network behaviors, as well as fight against crimes. So the research of this field becomes quite necessary. Under those demands, the research of Accountability System in Multi-domain environment is proposed, to build a log monitoring and security audit platform which can adapt to the current multi-domain and distributed network environment in order to meet the need of unity of responsibilities, rights and benefits of network environment is our goal.Although the Accountability has got more and more attention along with the increasing concerns about network security, there is still no clear definition of accountability of network trusted system. In response to this vacancy, this thesis first gives the definition of Accountability, as well as defines the content and objects of Accountability, in accordance with the role and purpose.To construct Accountability mechanism under multi-domain distributed environment, the first thing we should resolve is how to overcome the problems brought about by the heterogeneity and dynamic of network resources as well as the differences between management strategy of each domain. In addition, how to bring the audit log data in different location and different format together and do the cross-analysis. In light of these problems, based on the research and analysis of relative technology of Accountability, we propose a multi-agents architecture and design a prototype of distributed Accountability System which resolves those problems. This prototype supports concentrated configuration and management, while can be managed at several levels as well.In order to provide standard interfaces for the standardization of services, the article focus on the design of a standard audit log formats to address the issue of compatibility and interoperability.Another focus of this thesis is designs and implements a Communication Language named EX_KQML which is combination of KQML and XML. It is not only semantics clear, analytical convenience, but also scalable. The most important thing is it supports configuration and cooperative work of agents in the Accountability System.