Unreliable environment-oriented audit log read-write managing method and system

Abstract

An unreliable environment-oriented audit log read-write managing method and system. The method comprises a writing-in step, in which audit logs produced during an audit procedure by an audit device are periodically backed up to a log file related to time and in a hard disk, a read step, in which relative files are extracted according to user selected time, and importing the extracted log file to a database for check use. The audit logs are written into the log file, so even when power is off during the writing, only the last write-in log is affected; therefore system damage probability during sudden power-off can be reduced; when a user checks a log, the log file can be extracted according to user selected time and imported to the database; during the log file explicit importing process, the device power supply is not turned off due to the awareness of the import process, so possibility of errors during the importing of the log to the database can be greatly reduced; and further, during the check, a database of column storage type is employed, so log writing-in speed can be improved.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to an audit log reading and writing management method for an unreliable environment. Background technique [0002] Network security generally requires security audit equipment to record and save users' online behavior logs for a period of time, and can query by time, IP, URL and other dimensions. Compared with other database business systems, the storage and query of audit logs has its own characteristics: on the one hand, the log is written frequently, and each user’s online behavior must be written into a log; on the other hand, , the query frequency of the log is low, and the audit log on the device will be queried only when the source of the network security problem occurs. [0003] Desktop low-end devices are faced with an unstable environment where users often lose power after get off work or during breaks. Since relational databases such as Mysql are used to rec...

AI Technical Summary

Problems solved by technology

[0003] Desktop low-end devices are faced with an unstable environment where users often lose power after get off work or during breaks. Since relational databases such as Mysql are used to record and query audit logs, a sudden power failure during writing will cause damage to the database table, resulting in a loss of device function. unavailable

The current method usually used is not to record the audit log on the audit device, but to send the audit log back to a special device for log storage and query. This method increases the user's additional hardware costs and maintenance costs.

Images