SECURITY INFORMATION IN PRODUCTION AND OPERATIONS: A STUDY ON AUDIT TRAILS IN DATABASE SYSTEMS

Special care should be taken to verify the integrity and to ensure that sensitive data is adequately protected. One of the key activities for data loss prevention is anaudit. And in order to be able to audit a system, it is important to have reliable records of its activities. Systems that store critical data, whether financial or productive, must have features such as audit log, also called audit trail, which records all activities on critical data. This allows to identify harmful actions that can be internal or external, intentionally or unintentionally caused. Therefore, this paper presents major studies in security audit trail (audit log), especially records of logs, and it presents what is available in terms of commercial tools and what they offer.

需格外谨慎以验证数据完整性，并确保敏感数据得到充分保护。数据防泄漏的核心工作之一便是审计。若要对系统实施审计，可靠的系统活动记录是必不可少的前提。存储关键数据（无论为金融类还是生产业务类）的系统，必须配备审计日志（audit log，亦称审计追踪（audit trail））这类功能，用于记录所有针对关键数据的操作活动。借此可识别来自内部或外部、有意或无意引发的有害操作。有鉴于此，本文梳理了安全审计追踪（audit log）领域的主要研究成果，尤其聚焦日志记录相关内容，并介绍了当前商用审计工具的可用方案与功能特性。