Distributed security auditing subsystem for an operating system

Details Distributed security auditing subsystem for an operating system Distributed security auditing subsystem for an operating system

1990-06-22

1991-07-16

MacDonald, Allen R.

Boots, shoes, and leggings

3642806, 3642864, 364228, 3642225, 380 4, 380 25, H04L 900, G06F 1516, G06F 1300

Patent

active

050329790

ABSTRACT:
The distributed auditing subsystem invention runs in a UNIX-like operating system environment with a hierarchical file system. The invention provides an audit trail of accesses to the objects it protects and maintains and protects that audit trail from modification or unauthorized access or destruction. The audit data generated by the invention is protected so that read access to it is limited to those who are authorized for audit data. The invention enables the recording of events which are relevant to the maintenance of the security of the system, such as the use of identification and authentication mechanisms, the introduction of objects into a user's address space, the deletion of such objects, actions taken by computer operators and system administrators and/or system security officers, and other security relevant events. The invention generates an audit record for each recorded event which includes the date and time of the event, the user, the type of event, and the success or failure of the event. The invention performs an on-line compression of the audit trail log file using a UNIX-type daemon process. The audi daemon process has a restartable feature that enables it to recover after node failures.

REFERENCES:
patent: 4558413 (1985-12-01), Schmidt et al.
patent: 4621325 (1986-11-01), Naftzger et al.
patent: 4672572 (1987-06-01), Alsberg
patent: 4720782 (1988-01-01), Kovalein
patent: 4734865 (1988-03-01), Scullion et al.
patent: 4757533 (1988-07-01), Allen et al.
patent: 4825354 (1989-04-01), Agrawal et al.
patent: 4970644 (1989-11-01), Berneking et al.
patent: 4977594 (1990-12-01), Shear
The Design of the Unixoperating System--Maurice J. Bach, 1986, pp. 422-429.
An Introduction to Database Systems--C. J. Date, 1983, pp. 11-13.
J. Picciotto, "The Design of an Effective Auditing Subsystem," Proceedings of the 1987 IEEE Symposium on Security and Privacy, Oakland, Calif., pp. 13-22 (Apr. 1987).
T. A. Berson, et al., "KSOS--Development Methodology for a Secure Operating System," Proc. of the Natl. Comp. Conf., vol. 48, AFIPS Press, 1979, Montvale, N.J., pp. 365-372.
S. Kramer, "LINUS IV--An Experiment in Computer Security," Proc. of the 1984 Symposium on Security and Privacy, Oakland, Calif., Apr. 1984, pp. 24-33.
G. J. Popek et al., "UCLA Secure Unix," Proc. of the Natl. Comp. Conf., vol. 48, AFIPS Press, 1979, Montvale, N.J., pp. 355-364.
V. D. Gligor, et al., "On the Design and Implementation of Secure Xenix Workstations," IEEE Symposium on Security, 4/86, pp. 102-117.

Affiliated with

Also associated with

Rating

Distributed security auditing subsystem for an operating system does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Distributed security auditing subsystem for an operating system, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Distributed security auditing subsystem for an operating system will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-136653