CAJ | 학술논문

针对数据库审计技术存在的缺陷，提出利用数据库会话技术，设计具有实时提醒和处理安全风险能力的数据库审计子系统。系统详细记录用户的操作行为，对非法入侵行为进行主动处理，增加了审计系统的主动防预能力，将“事后审计分析”提前到“事后及时处理”。该系统应用证实有效提高了数据库的安全性，保护了企业和用户的信息。
침대수거고심계기술존재적결함，제출이용수거고회화기술，설계구유실시제성화처리안전풍험능력적수거고심계자계통。계통상세기록용호적조작행위，대비법입침행위진행주동처리，증가료심계계통적주동방예능력，장“사후심계분석”제전도“사후급시처리”。해계통응용증실유효제고료수거고적안전성，보호료기업화용호적신식。
According to the shortcomings of database audit technical, Put forward a method of designing a real time and security risk capacity database audit subsystem based on database sessions. The system records the user’s operation behavior, hand the illegal invasion behavior actively, adding the active prevention ability of the audit system, it can advance the"post audit analysis"to"after the timely processing". The system proved effective in improving the security of databases, protect business and user information.