.Unix / Linux Server Shell Audit Platform Design And Implementation

Enterprise server security management is critical for enterprises, At present, most enterprises are using the enterprise-class firewall system which has its own advantage, But in the current complex network environment, There are still many security risks to be resolved. Confidential business files are still unwittingly ran to the competitors computer.Although the corporate network has three layers, However, when staffs visit sites, use instant messaging and other network software, Some spyware, and other malicious programs will unknowingly be downloaded to your computer, and spread within the enterprise networks. According to FBI and CSI had 484 companies survey of Network Security:More than 85% of the security threats from within the company, due to internal staff as much as a result of loss of assets of more than 6000 million dollars. It is the loss caused by hackers 16 times the loss caused by the virus 12 times.In this paper, according to the analysis of the security of the enterprise server management status and problems, Leads to a kind system of telnet protocol by intercepting packets and Parsing it, and then get the command in the linux. It can monitor all the network used in the Linux, and it will Be saved to the database. throug analysis of the linux shell commands in the database Which Can facilitate the analysis of user actions. Using this framework, it do not need change the framework of the original Enterprise Server, and do not require changes to other operations. in the method it does not have any effect on to the original business enterprise.