Design And Implementation Of An Auditing System Based On DB2 Database On The Mainframe

Today the information technology is changing rapidly,the extent of the banking information system is increasing.Particularly after the centralized data processing center is established in banks,data centralization leads that the risk of financial information has become increasingly prominent.How to strengthen the banking information security management and build a good auditing system to help the managers know user's doing in information system timely in order to find potential risks in advance and then to protect the information system's security better has become a major issue that the financial industry faces.The existing auditing project based on DB2 database on the Mainframe primarily makes a comprehensive analysis for DB2 Trace logs,RACF logs,JES logs and DB2 CATALOG table.Although it has a certain degree of audit to DB2 database security,there are still several problems such as insufficient log information,insufficient audit timeliness,and lack of effective measures in real-time monitoring and alarming.To make up the defects of existing auditing system and to meet the needs of domestic and foreign regulatory and industry standards,this article designs an auditing system model based on DB2 database on the Mainframe,focusing on achieving the following objectives:Firstly,in order to solve the problem of the incomplete DB2 database logs,putting forward a method that catches the logs from DB2 address space directly to achieve the log collection capabilities of all access to DB2 database.Secondly,in order to solve the problem of auditing logs by artificialcontrast,designing a project that can contrasts the change projects and the logs automatically to achieve the automatic audit and to improve the audit efficiency.Thirdly,in order to meet the needs of the audit timeliness,putting forward a method that link the auditing system with the mail system to achieve the real-time alerts of the illegal access behavior to DB2 database.Lastly,through making the pressure test to the auditing system,verifying that the auditing system design are practical and feasibility.The pilot run results show that the auditing system designed can effectively meet the needs of auditors in actual use and improve the audit efficiency.At the same time,the effect on the Mainframe is less when the auditing system is running.