Research On The Security Audit Technology Of The Host Command Log In The Signal Security Data Network

As it is known to all, the development of information technology has affected the signal safety data network in High-speed rail signaling system. As the communication between the signal safety data network and host systems has become more frequently, traffic data has been significantly increased. Railway signaling system functional requirements for information transfer is no longer as before. As more generic software and protocols are applied to the railway signal system, which caused an increase in security problems. Because the system has functional defects, making a suitable data network security audit system for command logs of hosts is of great importance. This idea has practical significance.Research work of this paper is as follows:Firstly, I have studied the safety investigation report, and then locate the security vulnerabilities in the system. I determine that the development of host-based instruction log audit system is the main idea of this article.Secondly, I learned the basic theory and analysis of audit logs on the host command. Through previous studies, I have improved string pattern matching algorithm, and then got better pattern matching algorithm.Thirdly, I designed and implemented the audit system for the host command logs, which based the characteristics of the host command logs. And I use the host command logs of RBC as an example. A security audit to logs is made through the system.Finally, I make a functional testing for the system. The test results indicate that the system has achieved the basic functions.