| With the rapid development of electric power industry informatization,the computer network integrates more and more application systems such as line and substation online monitoring,ice-covered line monitoring,substation intelligent robot,video conference,office,marketing and billing systems.As an important sector concerning national economy and people's livelihood,the electric power company is particularly susceptible to network attack and invasion.Traditional security devices such as firewall and intrusion detection device can only control network connection and access legality,but fail to monitor internal network abnormalities.Considering these factors,it is imperative that a log audit system is designed for comprehensive data network of State Grid Corporation,which shall also establish a set of log audit safety system with unified standards to collect a large number of data from all security devices,network devices,servers and hosts as parts of comprehensive data network for unified management and comprehensive audit and test the sensitive operation so as to protect the data network.This paper introduces the shortcomings in current log audit method of Maintenance Branch of State Grid Sichuan Electric Power Corporation at firstly and then discusses functional & non-functional requirements analysis on log audit system based on the application of log audit system in various enterprises and the necessity of log audit system development and construction of Maintenance Branch of State Grid Sichuan Electric Power Corporation.This paper demonstrates the design and implementation of log audit system in terms of the network structure and software design.The network structure realizes the single-level deployment of log audit system in terms of hardware and lays a foundation for horizontal and vertical expansion of the log audit system network in form of reserved multi-level deployment in the future.In terms of software,the log audit system of Maintenance Branch of State Grid Sichuan Electric Power Corporation realizes application of log data at all stages from receiving to storage to analysis & statistics by proven B/S architecture,MySQL database and C++ language platform.At the end of this paper,the implementation and practical application of each linkhave been tested successfully from various perspectives,thus making substantial progress. |