公安业务网高安全级审计系统的设计与实现-软件工程专业论文.docx

(2) 将 Oracle 数据库的多种审计技术应用到审计数据库中，对审计数据库本身进行 了全方位的加固，实现了对重要数据的双重审计，提高了审计的安全强度。 (3) 充分利用公安现有的短信服务平台，并自动与审批信息对照，及时将重要的审 计信息以短信方式发送给审计员，提高了安全审计的效率。 本文最后对系统的实现进行了介绍，结果表明该系统基本达到了公安业务网对安全 审计的需求，在一定程度上能增强公安业务系统的信息安全。 关键词 安全审计，公安，日志，数据库，短信应用 DESIGN AND IMPLEMENTATION OF THE STRONG SECURITY AUDITING SYSTEM IN THE POLICE BUSINESS INTRANET ABSTRACT With the increasing of the important information transmission by using the computer networks, information security will become increasingly important. Golden shield network is a private network which every business system of the national public security sector runs on. The security of business systems will influence the national security and the social stability directly. In order to prevent the illegal invasion from the external network effectively, and prevent the internal person operating the system irregularly and stealing sensitive data, the system is specially developed, and the system is a high-level security audit system which is independent with the business system. This paper is based on the system’s research and development. It analyzes the present situation and special requirment about the information security of the police business network. It designs a security auditing system of the business network wholly. The system collects the auditing log by Using the technology of the firewall, Socket communication and Microsoft’s Remote Access Service (RAS). It audits the database secondly which the auditing data are saved by using various technology of the security audit in the Oracle database. It encapsulates the interface of the SMS platform which has used in the public security department,and sends the important auditing information to the auditor timely by using the platform. It achieves the goal of the high strength security audit to the police business intranet. The main research work are listed as follows: Based on the in_depth study to the technology of collecting the firewall log, it collects and filtrates the required