Design And Implementation Of A Distributed System Security Audit Data Transmission Module

The project The Department of Science and Technology "Research on the technology and standard about Intranet-based distributed security audit "(NO.2003DIA7J051) researches the technology ane standard on distributed security audit .Its requirement is from information security on important practical systems which is based on e-government and e-commerce.One of the proposals from the project is developing a distribued security audit system. For it,a group is formed. After requirment analysis and framework design,the modules are distributed to the members of the group.I,as the member,conduct to design and implement the module on data communication.The thesis explains my work about the module. It is:1)study the technology and products on the distributed security audit;2)study the technology on middleware and the product TongLink/Q;3)general design on the communication module;4)particular design and implement on the communication module.The advanced points about my design on the module are:1)it is based on the TongLink/Q,and it supports secure and robust communication;2)it is not depending on the OS platform. it is interface function which is used by audit agent and data center;3)the encryption module,the decryption module and data signature module are seperate interface function. They can be combined according security policy;4)it supports multiple level audit;5)it supports the security evaluation for audited machine,and special security policy for particular security level;6)the reuseness of the module is high,and can be used in many enviroment For example, network communication and monitor for a large scale network.Welcome to give me some advice to improve the thesis.