【作者】 吴晓； 吴绽青； 陶先平； 吕建； 吕军；

【Author】 WU Xiao, WU Zhan-qing, TAO Xian-ping, LV Jian, LV Jun (State Key Laboratory for Novel Software Technology at Nanjing University, Nanjing 210093 China) (Institute of Computer Software, Nanjing University, Nanjing 210093 China) (Golden Eagle International Group Software System CO. LTD, Nanjing 210002 China)

【机构】 计算机软件新技术国家重点实验室(南京大学)； 金鹰国际集团软件系统有限公司；

【摘要】 信息系统应用过程审计是一种有效的信忠系统安全保障手段。但是现有的过程审计软件灵活度不够高、适应性不够强。针对上述问题,文章基于移动agent技术,讨论了一个信息系统应用过程审计软件ABIAS的设计和实现。在该系统的体系结构设计方面,利用agent的移动性和自主性,给出了两种灵活的审计agent部署方案,体现了审计软件的开放和灵活性;在agent设计和实现方面,结合桌面行为审计的领域需求,给出了其结构化迁移方案, 有效地支持了审计行为的“临检”特性。更多还原

【Abstract】 Process audit software on information system applications is effective means in ensuring security of information systems. However, existing systems lack high agility and self-adaptation. In response to these problems,this thesis will discuss the design and implementation of such a software, named ABIAS, in a mobile agent approach. In designing the architecture,this thesis brings about two agile scheme of deployment in the light of mobility and autonomy of mobile agent, which expresses openness and agility of audit software. In constructing the agent, this thesis presents structured migration mechanism in accordance with the requirements in the application domain of desktop audit, which effectively seconds "temporary inspect" of audit behavior.更多还原