Design And Implementation Of SQL SERVER Database Audit System

With the construction of information and the approaching of the digital era, Data plays a more important role. As the enterprise’s most commonly used data store tool, database’s security need to be very good protection. This paper’s subject is design and implementation of SQL SERVER database audit system, aiming at studying of database security in electric power enterprises in the electric power enterprise environment.The topic will devises and researches the system from system function, deployment way and implementation procedure three aspects. System adopts the bypass way to deploy data, through the mirror mode to complete data collection, through data-stream reassembling to complete data reduction, through the analysis of the TDS protocol to parse of SQL SERVER database commands, through the combination of human strategy and auto strategy to complete database command auditing work, through the WEB to complete the audit data display and control work of analytical procedures. System uses libpcap library, TCP/IP data flow recombination technology, TDS protocol analysis, AC pattern matching algorithm and mathematical statistical analysis technology to complete the audit work of SQL SERVER operation and uses postgres database, JNI, UNIX SOCKET to complete audit data display and control work of analytical procedures through WEB side.Through the application example’s demonstration, SQL SERVER database audit system can complete the audit work accurately and efficiently by the use of user’s behavior learning and artificial configuration audit strategy. It can improve the security of electric power enterprises in the database.