Database security auditing method and system and computer readable storage medium

Abstract

A database security auditing method comprises the following steps of obtaining a database message in traffic; carrying out unpacking analysis on the message; executing a preset auditing strategy according to the obtained operation behavior of the database account through analysis, and generating an auditing log; and generating an early warning report for the operation behavior violating the auditing strategy according to the auditing log, and storing the auditing log and the early warning report. According to the database security auditing method, different auditing strategies are formulated for different operation behaviors, so that the coverage range of abnormal operation behaviors of a database in the express industry is expanded; the identification accuracy of the sensitive informationis improved, and the machine learning mode greatly reduces the workload of manual audit and improves the working efficiency.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to the security audit of databases. Background technique [0002] With the development of Internet technology, databases have brought great convenience to users in storing and querying data in the application of various industries. In some logistics companies, there are a large number of express business systems and databases. These data have user privacy information characteristic of the express industry, or internal confidential business information. Therefore, in order to ensure the security of user information and prevent information leakage, it is extremely important to conduct a security audit on the database. However, the current common database audit methods mainly follow the laws and regulations of various countries or the strategies formulated by the characteristics of industries such as finance, and there is a lack of database security audit methods suitable fo...

AI Technical Summary

Problems solved by technology

However, the current common database audit methods mainly follow the laws and regulations of various countries or the strategies formulated by the characteristics of financial and other industries, and there is a lack of database security audit methods suitable for the express delivery industry.

Images