Control and Audit Based on Users under Unix

李俊,李海涛,王波

DOI: https://doi.org/10.3321/j.issn:0479-8023.2002.01.007

2002-01-01

Abstract:In Unix system,it is necessary to add module of control and audit based on users.By adding a net module called iplog in Solaris, the goal is fulfilled and therefore the safety of operation system is strengthened.It is shown that the method is effective solution with not very heavy load.

What problem does this paper attempt to address?

Design and Implementation of Unified Access Control System Based on LDAP

ZHENG Lan,CHEN Qi

DOI: https://doi.org/10.3969/j.issn.1000-7024.2005.07.058

2005-01-01

Abstract:With the rapid growth of internet and enterprises on a global scale, the use of directories as accessible repositories providesa flexible and various solution for gathering, storage and accessing information. The design and implementation of an unified accesscontrol system supporting single-sign-on areintrodueed, whichis based on LDAPdirectory and combines access controls ofall applicationsystems to realize security access system of unified users management. The system used middleware technology to efficiently resolvethe bottleneck problem when a lot of users accesed LDAP database.
An Enhanced Lightweight Logging in UNIX

LIU Jia,ZI Xiaochao,PAN Li,LI Jianhua

DOI: https://doi.org/10.3969/j.issn.1000-3428.2006.06.025

2006-01-01

Abstract:Based on the theory of audit only security involved,this paper presents a new way of logging which can greatly reduce the volume of BSM while same audit target is supported at the same time.
Enhancement of Auditing in Linux

LIU Jia,ZI Xiaochao,PAN Li,LI Jianhua

DOI: https://doi.org/10.3969/j.issn.1000-3428.2005.12.018

2005-01-01

Abstract:This paper discusses how to develop the audit module for secure operating system based on the Linux kernel. This audit subsystem cancollect all the core-level information by mounting audit points in the kernel, and provide secure audit management with automate analysis fromremote terminal through website.
Research on Information Security Model and Security System Design

黄益民,平玲娣,潘雪增

DOI: https://doi.org/10.3785/j.issn.1008-973x.2001.06.005

2001-01-01

Abstract:After study of existing security models; analysis of information flow model, Bell-LaPadula(BLP) access control model and Biba access control model; and collation and comparison of their advantages and disadvantages, an improved model is put forward that satisfies the actual demands of information security. An implementation strategy is put forward that ensures information security, reliability, practicality and compatibility in the designed security system. An implementation scheme of this security system and its components and functions is provided. This system combines the following functions: mandatory access contro1, privilege separation, security audit, identity authentication and self-protection. It achieves the level 3 of national information security standard and level B1 of TCSEC standard. It was implemented in the Windows NT and Linux operating system and has yielded good resultsin application.
DESIGN OF USER MODE FILE SYSTEM BASED ON LINUX

Zhou Qiang,Li Shanping

DOI: https://doi.org/10.3969/j.issn.1000-386X.2007.10.033

2007-01-01

Abstract:A design of user mode file system based on Linux is introduced.A kernel module and a user mode daemon are adopted.The user mode file system can improve the flexibility of file system,and it is easy for redevelopment.The detailed issues about the design are presented,and the practical example and application scope are proposed.
An Enhanced Security Auditing Mechanism for Linux

徐辉,潘爱民

DOI: https://doi.org/10.3969/j.issn.1001-3695.2004.11.052

2004-01-01

Abstract:An enhanced security auditing mechanism for Linux is proposed.This mechanism is based on loadable kernel mo-(dule) and provides system level and application level auditing functions.System audit generates an audit record for every security sensitive system call.Application level audit abandons the traditional auditing fashion that auditing system completely depends on applications writing log file in user space.Instead,applications and system kernel will generate audit record coordinately.Examples are given for intrusion detection with this mechanism.
Trace User Operation in Telnet and FTP Protocol

李江,张峰,秦志光

2003-01-01

Abstract:Network interception and analysis is one of the important ways used in network security. In this article the fundamentals of network interception is analyzed. Based on interception technology a method is introduced that can monitor the action of users and record it. In the last the correlative questions of displaying and recording the action of network user in Telnet and FTP server are discussed, also a solution scheme is set forth at the end.
Campus Network User Tracing System Design and Implementation

ZHOU Chang-ling,CUI Jian,SHANG Qun,ZHANG Bei

DOI: https://doi.org/10.3969/j.issn.1672-9781.2007.02.008

2007-01-01

Abstract:In order to improve the campus network management efficiency, whenever a security event occurs, network operators can easily trace those users who abused the network or did illegal things, auto-logging campus network user information and relate things are required. This paper presents a way combining the IP, MAC, user profile, switch port data to trace user location. A system using this method is designed and implemented in our campus network that shows our solution is valuable.
A Unix Security Auditing System Based on Dynamic Tracing

XUE Zhi-ping,XUE Zhi,WANG Yi-jun

DOI: https://doi.org/10.3969/j.issn.1009-8054.2008.01.031

2008-01-01

Abstract:A Unix security auditing system based on dynamic tracing is described in this paper, and the design and realization are discussed. In the system, the detectors, set by dynamic tracing DTrace in the kernel, are used to collect audit information, and the audit logs are written in a standard format. Meanwhile, the secure storage and automatic analysis for the logs are realized in C/S mode.
Design and Implementation of Monitoring LAN Based on Web Administration

王东滨,方滨兴,云晓春

DOI: https://doi.org/10.3969/j.issn.1000-3428.2002.10.079

2002-01-01

Abstract:The paper presents the method that monitors the behaviors of the users to the Internet, including the visited station, time and so on, and adopts Web-based management mode. The design of the architecture based on C/S and the technique of the information management and the packet capture are implemented.
Research of Message Traffic Mechanism in Linux IP Networking

李金库,张德运,张勇

DOI: https://doi.org/10.3969/j.issn.1000-7024.2001.06.006

2001-01-01

Abstract:As a networking operation system, Linux provides users powerful message traffic utilities. After giving the message traffic module, the title introduced the message sending and receiving mechanism in Linux IP networking carefully.
Design and Implementation on Network Monitor and Audit System of Large Scale and Multiple Users

ZHAO Ling-tao,YANG Shu-tang,LU Song-nian,LI Jian-hua

DOI: https://doi.org/10.3321/j.issn:1002-8331.2006.32.032

2006-01-01

Computer Engineering and Applications Journal

Abstract:This article researches and realizes a network monitor and audit system of large scale and multiple,based on security audit and monitor technology.The system is not only suitable for class-scale security audit technology teaching and practicing but also suitable for scientific research.As the test and practice proved,the system possesses can support more than 150 users' concurrent accessing and the response time is not more than 1 s.
A Data Integrity Protection Method for Network File Systems Based on Secure Audit Logs

Rongrong Huang,Jiwu Shu,Da Xiao,Kang Chen

2009-01-01

Journal of Computer Research and Development

Abstract:Network file systems facilitate data sharing but also introduce new vulnerabilities.Audit logs that trace the changes of file system data to prevent fraudulent manipulation of data have great value in evaluating system security.Current systems cannot satisfy the requirement of users because they fail to ensure the security of audit logs.The powerful insider adversary can modify the audit logs covertly to erase evidence of illegal modification directly via device drivers.A data integrity protection method is presented for network file systems based on secure audit logs.Every file and directory has an authenticator to ensure the integrity of data.All changes to data are traced and the corresponding audit logs are generated.At a later time,an auditor may verify the data of a file according to the authenticators and audit logs.A trusted hardware is introduced to manage audit key and to enable the generation and trustworthiness of authenticators and audit logs.A prototype of Nfsd-log is implemented based on the NFS server in Linux and its performance iS evaluated. SSH-build benchmark test shows that the total time overhead of Nfsd-log only increase by 9.2% comparing with original NFS server.
Research and Implementation of Web Logs Centralized Management System

吴海燕,朱靖君,程志锐,戚丽

DOI: https://doi.org/10.3969/j.issn.1002-4956.2008.07.026

2008-01-01

Abstract:Web is now the biggest network service on the Internet.The analysis of Web logs plays an important role in the security management and the maintenance of a website.But because of the decentralization of deployment and the use of load balancing,Web logs are often seperated from each Web server,which makes the management and analysis of them not so convenient.This paper designs and implements a Web Log centralized management system(named ThuLog),which includes 3 modules: the centralization of logs,the storage of logs and the analysis of logs.Through log analysis of several critical Web systems in Tsinghua University,it could help system administrators learn clearly what happens in information systems and achieves good operating results.
DESIGN AND IMPLEMENTATION OF SECURITY AUDITING SYSTEM FOR LINUX SERVER

Tao Zhang,Yang Yu,Yi Li

DOI: https://doi.org/10.3969/j.issn.1000-386x.2014.05.005

2014-01-01

Abstract:With the penetration of Linux technology,lots of Linux servers have been deployed in distributed systems.It becomes a big problem to carry out effective security auditing for those server resources at present.We design and implement a security auditing system applicable to complex distributed environments according to the characteristics of Linux servers.Our solution adopts component-based, modular architecture to support multi-layer deployment.Based on the audits at kernel level and application level,our system achieves the comprehensive audit on Linux servers including system resources,terminal accesses,file,database and network resources,etc.Meanwhile, our system uses data mining techniques to thoroughly analyse the audit message,and realises the intelligent auditing on Linux servers.Our system has been deployed in a real system,and shows very good effect.
The System Based on User Network Behavior Monitoring and Controlling Against Common Network Attack

HUANG Jia-Lin,Liu Hai-Tao,Mei Zhen-Kun,Gan Miao-Jin,Sun Qian

2008-01-01

Periodical of Ocean University of China

Abstract:The management of a large campus network is complex and difficult.An effective network management system is basical for secure and steady network.The current network management systems focus on the management of the equipment,they have not related network management to the network user behavior.The System Based on User Network Behavior Monitoring and Controlling amalgamated the technical character of various system manufacturer.Because of making use of the functions and the management messages of the present network equipments and systems,analyzing and ruling the user's network behavior,and eliminating the effect of the bad network behavior,it can maintain a secure and steady network and reduce the network manager's workload.
Research of Security Analysis and Audit Technique Based on Network Content

万国根,秦志光,刘锦德

DOI: https://doi.org/10.3969/j.issn.1001-3695.2004.01.037

2004-01-01

Abstract:In this paper, the research of Security Analysis and Audit Technique Based on Network Content is demonstrated. A new way for capturing packet in high traffic network by deploying high traffic to low-performance computer is provided,followed by the technique which is used in analysis of many of the commonly used Internet protocols.
RESEARCH OF A KIND OF OPTIMIZED ACCOUNTING SYSTEM

李之棠,郑宏忠

DOI: https://doi.org/10.3969/j.issn.1000-1220.2001.03.026

2001-01-01

Abstract:Firstly the paper discusses a kind of accounting system in whichthe accounting module is detached with major system. Then according to the network traffic model, the accounting system based on networking talking session is analysed in detail. At last some key parameters , such as the size of log and the interval of the sending of the log , is obtained by a function which is derived from above all discussion.
Accounting Management System Based on User Management

陈传峰,李增智

DOI: https://doi.org/10.3969/j.issn.1000-3428.2000.09.038

2000-01-01

Abstract:In the article,we discuss the application of network management technology in campus network,and a network accounting management system based on user management for campus network is proposed.
Accounting Data Controlling under Network Auditing

Xin Yan

2003-01-01

Abstract:This paper analyses the challenge of the network accounting data for the auditing. The methods that how to control accounting data is being put forwards under the condition of network auditing.

Control and Audit Based on Users under Unix

Design and Implementation of Unified Access Control System Based on LDAP

An Enhanced Lightweight Logging in UNIX

Enhancement of Auditing in Linux

Research on Information Security Model and Security System Design

DESIGN OF USER MODE FILE SYSTEM BASED ON LINUX

An Enhanced Security Auditing Mechanism for Linux

Trace User Operation in Telnet and FTP Protocol

Campus Network User Tracing System Design and Implementation

A Unix Security Auditing System Based on Dynamic Tracing

Design and Implementation of Monitoring LAN Based on Web Administration

Research of Message Traffic Mechanism in Linux IP Networking

Design and Implementation on Network Monitor and Audit System of Large Scale and Multiple Users

A Data Integrity Protection Method for Network File Systems Based on Secure Audit Logs

Research and Implementation of Web Logs Centralized Management System

DESIGN AND IMPLEMENTATION OF SECURITY AUDITING SYSTEM FOR LINUX SERVER

The System Based on User Network Behavior Monitoring and Controlling Against Common Network Attack

Research of Security Analysis and Audit Technique Based on Network Content

RESEARCH OF A KIND OF OPTIMIZED ACCOUNTING SYSTEM

Accounting Management System Based on User Management

Accounting Data Controlling under Network Auditing