Design And Implementation Of Database Audit System For Power Industry

Database security audit system can through to the operation of the database,real-time monitoring,recording and audit manager timely master database access,the illegal operation documented,and to adjust and optimize the potential safety hazard,realize the database security management.In this study,the system is designed and studied from the aspects of system function,deployment mode and implementation process.System uses the bypass mode to complete the system deployment,to complete the data collection through the mirror of data,through the data flow reorganization data collation,through the analysis of TDS protocol parsing work on SQL SERVER database command,matched by artificial strategy and automatic strategy complete database command the audit work,through the end of the WEB audit data display and analysis of program control.The system adopted Libpcap database,data stream of tcp/ip recombinant technology,TDS protocol analysis,AC algorithm for pattern matching and statistics analysis technology.Test has proved that,using the automatic generation of audit strategy and artificial configuration audit strategy with the combination of electric power industry database security audit system for database operations to achieve accurate and efficient audit,ensure the safety of the database.