A security audit system and audit method for an in-memory database

Abstract

The invention relates to a security audit system and audit method for an in-memory database. The security audit system for the in-memory database comprises an information acquisition system, a real-time analysis system, a real-time warning system and a data storage center, wherein the information acquisition system acquires a mirror image data packet and system syslog between an application system and the in-memory database; the real-time analysis system performs real-time data analysis and judges whether to give out a warning; the real-time warning system gives out a warning in real time; the data storage center records responded operation information. The system can well solve the audit problem of the in-memory database, performs compliance audit on the in-memory database and gives out a prewarning for violation operation. The invention also aims to provide the security audit method for the in-memory database.

Description

technical field [0001] The present invention relates to a safety audit system and an audit method, in particular to a safety audit system and an audit method for an in-memory database, which are mainly used in the compliance management of fine-grained audits for in-memory database operations, and for alarming risk behaviors encountered by the database. Background technique [0002] The database is the foundation of the information system. There are a large number of business data of the information system in the database. These data involve a large number of security issues of the information business and need to be protected. Therefore, there is a database audit system. The database audit system is dedicated to recording database activities on the network in real time, performing fine-grained audit compliance management on database operations, and alerting to risky behaviors encountered by the database. Through the recording, analysis and reporting of user access to the dat...

AI Technical Summary

Problems solved by technology

[0003] The current database audit system is still an audit system for disk databases such as Oracle, MySQL, and SQLServer. There is no audit system for in-memory databases. The existing database audit system can only audit disk databases such as Oracle, MySQL, and Server that use standard SQL protocols. At the same time, the audit is also aimed at standard SQL statements, but in-memory databases generally use NoSQL or customized communication protocols, so the existing database audit system has no ability to audit in-memory databases, and lacks an audit system developed for NoSQL

Images