摘要： 网络安全审计系统是网络安全体系中的重要一环,最近国内外的研究工作表明,传统操作系统中的安全审计系统在检测网络入侵方面的能力非常有限。为此,上海交通大学网络中心研究开发了一个基于防火墙日志的网络安全审计系统——NAFL (Netowrk security Audit system based on Firewall Log),该系统强调了TCP/IP协议栈底层行为的安全审计,弥补了传统安全审计系统的不足。

关键词: 安全审计, 防火墙, 网络入侵

Abstract: Network security audit system is a very important area of the network security architecture. Recent studies show that the traditional audit mechanism in the OS is helpless when we face the network intrusion behavior. So, we develop a network audit system-NAFL (Network security Audit system based on Firewall Log). This system focuses on the security audit function about the essential behavior of the TCP/IP protocol stack. It is an improvement of the other audit system.

中图分类号: 

• TP393.08