摘要： 分布式安全审计正在日益成为保障大型分布式网络环境安全的重要机制。该文介绍了当前分布式安全审计系统的研究现状，分析和归纳了现有研究在协同审计等方面存在的突出问题，根据知识协同思想设计基于行为特征描述的分布式安全审计模型。给出系统结构设计和应用场景，验证了模型的有效性。

关键词: 分布式系统, 安全审计, 协同分析

Abstract: Distributed security auditing plays an important part in enhancing the security of large network environment. This paper introduces the actual evolvement of the research on the distributed security auditing system, analyses and summarizes the notable problems existing in this research field. In order to overcome these problems, it brings out a distributed security auditing model which introduces the thought of cooperating by knowledge, based on behavior characteristic description. It also gives out design of the system structure, and takes a real example to prove the validity of the model.

Key words: distributed system, security auditing, cooperated analysis

中图分类号: 

• TP31