高安全审计系统的设计与开发-信息安全专业论文.docxVIP

中国科学技术大学硕士论文 中国科学技术大学硕士论文 任荣：高安全审计系统的设计与开发 ABSTRACT With the development of the computer science，the security of the computer system becomes more and more important．The secure operating system is the key to build robust computer systems．To some extent，the security ofOS is dependent on the secure auditing system．Nowadays，lots of secure operating systems have auditing function，and some of thenl have individual auditing systems．According to current research status．auditing system needs to be improved in foataspects：the eriect to kernel．auditing content．security of audit and the managementthe deposition of auditing record files． This project iS one module of the Lois SELinux，which obtained the following aspects． First，base on the Linux Security Module(LSM)，an extended Linux Security Modules was founded．With the extended LSM，a secure auditing was designed and implemented which met the needs of B2 level of TCSEC．According to the secure level，the secure auditing system Can monitor and log different audit event，maximized the security of the Lois SELinux． Second，according to the implement of Lois SELinux，some researches on key techniques of auditing system have been done．NOW the secure auditing system Can filter the auditing records in many ways．The role of the auditor in POSIX has been divided into 2 parts．one iS the operator of audit．and the other is the administrator of audit．To get a beRer protection，the configuration profiles of auditing system and the audit logs have been guarded by the OS’S security policies． Last，base on the current secure auditing system，the networking auditing system has been studied and implemented，in order to support better fault tolerance and computer forensics．After introducing a networking auditing system model，some design and implementation techniques has been discussed． In summary,the idea put forward in this paper intends to open a new approach to build auditing system The effectiveness of this approach is proved by practical system．As缸as