The Design And Application Of Database Audit System In Power Industry

The electric power industry is a key to national industries, which is a significant role to support the national economy. All database operation of electric power information system, recorded a large number of user information, production data and other key information, are the most strategic assets. The electric power industry information assets database is facing at serious security challenges. Database security audit system can effectively compensate for the lack of existing application system of database security, which is a necessary means to protect the security of database, important assets and safety production of the whole electric power information system.The current researches on database auditare lack of detailed information of power system design, which can’t meet the security requirements of electric power information database system: safety protection system needs a large amount of sensitive information; users need strict access control role diversity system; big data analysis ability behind the user access behavior analysis. Therefore, aiming at the above problems, the researches on the business system have access to the system’s behavior analysis, record, report of the security audit system. The main research contents are as follows:(1) Analysis of the security audit database of electric power industry: demand in electric power information system database table, view, sequence, package, storage process and other industry information system has obvious difference, administrator and user operation also has rules and characteristics of electric power industry operation. Therefore, the analysis of database security audit demand in the power industry, security permissions summary of different roles, is of great significance for the design of power industry database security audit system.(2) Summary of the design and the overall design of the database security audit system of electric power industry: database security audit system design of the electric power industry, the overall structure of software architecture; data acquisition module to complete the design of database security audit system, audit report module; determine the audit system development environment and operating environment, to ensure the efficiency of system development.(3)Statistical analysis of the security audit system fine-grained audit strategy and ontology Abstract: user behavior based on the RBAC model, provides a flexible and rich policy configuration function, help users to complete the precise definition of the audit strategy, audit strategy according to the business host and business users, fine-grained control; through the analysis, the important the audit system in behavior analysis, record, report, the most basic characteristics can be extracted personnel access behavior, effective compression of data need to be processed and the level, greatly reduce the processing time delay.