Safe Database Audit Subsystem

Database is the core and basis of information system and it stores much important information that need security protection. So people pay more and more attention on how to keep the security of database. At present, most of information system take safety measures to protect the database, but it’s not enough. When the database is attacked, the admin should know how the system is attacked and how to restore the data. Except these, the information of attacker should be recorded. Audit technology is proposed in such condition.An audit system for database is researched and designed in this paper, and it can record the operation in the database. By analyzing the audit records, it is possible to monitor the system, check and eliminate the potential security flaw.The mainly work in this paper is as the following:(1) An audit monitor for Safe Database is designed to keep monitoring the detailed information in the Safe Database. Then it analyzes the information whether to satisfy the rule and process the information by the action of corresponding rules.(2) For the maintenance of audit records and rules, it is to deploy an audit database in Safe Database. Audit admin can insert the audit rules into database by access the database or using audit manager.(3) An audit manager is designed by Java. It is a graphical tool to help the users to manage the audit records, rules and analyze the audit records.