A Security Framework for Database Auditing System

A database system is the core and foundation of an information system. And a security audit system is needed to a database system. Limitations of current database auditing are discussed in this research and a security framework is proposed to overcome them. The proposed framework provides the functions of audit system management, audit strategy management, log auditing, statistics report, real – time monitoring, and database system detection. There are six components are used for achieve the functions, event manager, event generator, event collector, event analyzer, event reporter, and event memorizer. The proposed framework is based on fine – grained auditing method which can provide a better performance.