Research And Application Of Oracle Audit Technology In Teaching Management Information Systems

Educational MIS covers every section of educational management in a college. It involves teaching plan, teaching recourses,student status, student result and textbook management. Among the above sections, there are some sensitive areas such as diploma information, student result, punishment record and textbook information. Therefore, more and more colleges are becoming aware of the importance of Educational MIS security insurance. Now, most colleges have taken measures to protect the Educational MIS. However, no protection is perfect because threatens may come from external attack or from intended tampering by internal staff even the system administrator. Security audit software can give an alarm encountering illegal operations and then stop them. It will also make records of the operation as an evidence for investigation.Firstly, this paper pointed out that the Educational MIS is facing all kinds of security threat basing on researches of the system and its database. However, traditional security measures and auditing programs of a college can not insure the safety of the system, not to mention the intended tampering by internal staff like result administrators or even the system administrator. Secondly, the paper discussed the standard and technologies of the Oracle database security auditing in detail. Through comparative analysis of Oracle scheme auditing, trigger, logminer auditing and Fine-Grained Auditing, the author chose appropriate auditing technologies for different modules of Educational MIS. Finally, according to the features of Educational MIS, the author formulated security schemes thus realized security insurance and monitoring management of the database as well as warning and interrupting illegal operations. Security auditing software can record important operations in the system which makes evidences for checking. It also realized playback of the operations no matter they are though client sides or WEB sides or even the bottom of database. For some sensitive information such as student results and diploma auditing, the software can scout the changes so that we may find out the process in detail combining operation records and operation playbacks. In view of the inexperience of auditing staff, the author provided modules like client administration, auditing switch and audit settings so that the staff can easily use it.Security audit has not been applied in Educational MIS of most colleges at present, while this paper designed relevant modules and realized the auditing of the system. Comparing to other security audit softwares in market, this one is totally transparent to upper applications and can be used without changing any code of client side or WEB side or even the bottom structure of Educational MIS.This security auditing scheme made a further step in the security insurance of Educational MIS in our college. Furthermore, it provided powerful technical guarantees for multi-level management and made certain contributions for the building of an incorruptible managing rank. Moreover, it’s of important referential value to all colleges and can be even directly transplanted by thousands of colleges using Zhengfang Educational MIS.