Research And Implementation Of Security Audit Monitoring Technology Of Intranet Host

As the host security events of the Intranet occurring frequently, how to prevent the resources of the Intranet from being misused, abused, and maliciously used becomes an urgent problem. The host security events are mainly due to illegal operations of the internal staff, with the features of great threats, difficult defense and locating, traditional host security management can not meet the actual demand, therefore, it is of practical significance to construct a host security audit monitoring system.Using security audit monitoring technology, this paper designs and implements a Host Security Audit Monitoring System based network management----NMB-AMS, which should eventually be able to control user unlawful practice intelligently through analysis of behaviors. Firstly, the paper analyzes the architecture of the Network Management System and researches on the key technologies about the host security audit monitoring. Secondly, of the problems on the Intranet host security management, combination of audit process, a design and implementation plan on data acquisition model, IH-Domain analysis model, IH-User analysis model and intelligent controlling model is given and a dynamic security audit tactics is proposed focusing on privilege library updating problem, which is of some reference value on integrated utility. Finally, in-depth study of security protection technology of the agent software, the paper designs test cases and tests each modules of the system. Testing results show that the Host Security Audit Monitoring System this paper designs can fundamentally solve the problem that is the intelligent controlling to user actions and achieve the design requirements of the system.