基于决策树的安全审计策略自适应管理控制平台

发布时间：2018-07-12 09:17

本文选题：安全审计 + 数据挖掘　；参考：《科技导报》2010年24期

【摘要】：目前国内众多信息安全企业针对电信运营商市场定制了4A(统一的账号、认证、授权、审计管理)解决方案。其中审计管理是展现4A整体效果,实施综合审计的最有力的功能模块之一,而审计策略的制定则是审计管理最核心的部分。现有审计策略定制方案主要为定制式,不具有通用性、可移植性等特点,且审计策略在制定的过程中,过多的人为因素带来的安全隐患往往是用户所不能接受的。本文所述基于决策树的安全审计策略自适应管理控制平台正是针对4A管理平台之审计管理子系统的业务需求和性能优化等方面存在的问题,结合用于处理海量数据的数据挖掘技术,实现了由系统自动生成审计策略,定期自适应优化审计策略等功能的审计策略通用平台。决策树优化的特殊方法使审计策略在应用过程中可以不断优化,从而满足不同业务系统的审计需求。
[Abstract]:At present, many information security enterprises in China have customized 4A (unified account, authentication, authorization, audit management) solutions to the telecom operators' market. Among them, audit management is one of the most powerful functional modules to show the overall effect of 4A and implement comprehensive audit, and the formulation of audit strategy is the most important part of audit management. The policy customization scheme is mainly custom style, it is not universal, portability and so on. In the process of making the audit strategy, the security risks of too many human factors are often unacceptable to the user. The security audit strategy based on the decision tree based on the adaptive management control platform is the trial of the 4A management platform. Considering the problems existing in the business requirements and performance optimization of the management subsystem, combined with the data mining technology used to deal with massive data, the audit strategy is implemented by the system automatically generating audit strategies and adjusting the audit strategy regularly. The special method of decision tree optimization makes the audit strategy in the application process. It can be continuously optimized to meet the audit requirements of different business systems.
【作者单位】：中国航空工业集团公司沈阳发动机设计研究所;北京启明星辰信息技术股份有限公司;
【分类号】：F239.1;TN915.08

【参考文献】