A Security Auditing System Based on Filter Drive

Abstract

The invention provides a safe auditing system based on the filter driver. The safe auditing system comprises a system filter driver module, a client acquisition module, a client processing module and a client sending module, wherein the system filter driver module comprises a middle layer filter driver module of an NDIS (Network Driver Interface Specification) driver module and a USB equipment filter driver module of a PNP (Plug-and-Play) driver module. According to the invention, the safety of the safe auditing system is improved.

Description

technical field [0001] The invention relates to the field of security auditing. Specifically, it is a filter-driven distributed security audit system. Background technique [0002] The rapid development of computer technology has brought about the digitalization of information, which has greatly improved work efficiency and promoted social development. At the same time, security issues have increasingly become important issues affecting the efficiency of many fields. Compared with the security of traditional data files, the security of digital information attracts more attention because digital information itself is easy to copy. With this feature, information is more vulnerable to threats of theft that are difficult to control and trace. Security audit is the inspection and review of system records and processes. The audit system can monitor the network dynamically and in real time by recording suspicious data, intrusion information, sensitive information, etc.; Forensics...

AI Technical Summary

Problems solved by technology

[0004] The technology of the present invention solves the problem: overcoming the problems of incomplete audit content, coarse audit granularity, and insufficient security of the audit system in the prior art, and provides a filter-driven security audit system, which solves the above three types of problems and improves the security audit system security

Images