Interception auditing method and system for data access

Abstract

The invention discloses an interception auditing method for data access. The method comprises the following steps that an agent execution module receives an access instruction transmitted by an application system when the agent execution module is started; the agent execution module audits the access instruction; when the auditing is passed, the agent execution module sends an access instruction to the database connection driver; and the database connection driver is used for accessing a target database corresponding to the access instruction. Therefore, according to the technical scheme, the embedded module is installed in the application system, and under the condition that the application system is not modified, the agent execution module which is generated according to the embedded module and has the auditing function is used for replacing an execution module in an original application system to auditing the access instruction. Thus, according to the method provided by the embodiment of the invention, the application system does not need to be transformed under the effect of intercepting and auditing the access instruction in real time, so that the method provided by the invention is easy to popularize and relatively low in transformation cost.

Description

technical field [0001] The present application relates to the communication field, and in particular to a method and system for intercepting and auditing data access. Background technique [0002] The application system generally accesses the database through access instructions, but if the access instructions do not meet the specifications, it may put a lot of pressure on the database. Currently, there are generally two systems for reviewing access instructions: [0003] Such as figure 1 As shown, one of them is to detect the completed or executing access instructions, analyze the abnormal access instructions, and then optimize the application system according to the analysis results. However, this method can only provide analytical data support for the improvement of database access, and cannot intercept and audit access instructions in real time. [0004] Such as figure 2 As shown, another method is that the application system sends the access instruction to a third-...

AI Technical Summary

Problems solved by technology

However, the application system in this method needs to be connected with the audit system. Therefore, the application system needs to be modified to a certain extent, which is not only difficult to implement and difficult to promote, but also increases the implementation cost of interception audit.

Images