Design And Implementation Of The Strong Security Auditing System In The Police Business Intranet

With the increasing of the important information transmission by using the computer networks, information security will become increasingly important. Golden shield network is a private network which every business system of the national public security sector runs on. The security of business systems will influence the national security and the social stability directly. In order to prevent the illegal invasion from the external network effectively, and prevent the internal person operating the system irregularly and stealing sensitive data, the system is specially developed, and the system is a high-level security audit system which is independent with the business system.This paper is based on the system's research and development. It analyzes the present situation and special requirment about the information security of the police business network. It designs a security auditing system of the business network wholly. The system collects the auditing log by Using the technology of the firewall, Socket communication and Microsoft's Remote Access Service (RAS). It audits the database secondly which the auditing data are saved by using various technology of the security audit in the Oracle database. It encapsulates the interface of the SMS platform which has used in the public security department,and sends the important auditing information to the auditor timely by using the platform. It achieves the goal of the high strength security audit to the police business intranet.The main research work are listed as follows:(1)Based on the in_depth study to the technology of collecting the firewall log, it collects and filtrates the required firewall log timely which is needed in the security audit from the log server using the technology of the Socket Communication. It can provide the important gist to find the external invasion timely. (2) Based on the in-depth study to the technology of RAS, it collects the information of the remote dial by using Microsoft's API technology. It can help auditors to find the illegal user who has dialed into the intranet when auditors check the maintenance records.(3) By studying the auditing technology of Oracle's database, it strengthens the auditing database by using various auditing technology which includes the standard audit,triger audit, fine-grained audit and the audit to database administrator. It can prevent internal staff delet or modify the audit data illegally. It can guarantee the all-round security of the audit database itself.(4) It discusses how to encapsulate the interface of the SMS platform which is used in the Public Security Department. It implements the function by programing which responses the important auditing information automatically by using short message. It can send the auditing information which is not matched with the approval information to the appropriate police and Auditor.The innovation of the paper is listed as follows:(1) The paper integrates the technology of the firewall, Socket Communication, RAS and log collection to apply and implement in the security auditing system in the police business intranet systematically. It improves the security strength of the police business system, and it has a promotional role in areas which the security requirement is higher than others, such as the military department.(2) It applies various auditing technologies of the Oracle database to the auditing database. It strengthens the auditing database wholly,and implements the second audit to important data, and improves the security auditing strength.(3) By using the existing SMS platform in Public Security Department, and comparing with the approval information automatically, it sends the important auditing information timely to the auditor by short message, and improves the efficiency of the security audit.Finally, the paper introduces the realization of the system. The results of the realization show that the system meets the security auditing requirements of the business intranet. The system can strengthen the information security of the police business system.