入侵检测系统可以从日志审计数据中提取安全模式规则。
So IDS can extract security mode rules from the log audit data.
网络系统中存在大量的日志审计数据，在这些日志审计数据中含有许多与安全有关的信息。
In network system there is a large amount of log audit data which contain much information related to security.
但由于这些日志审计数据量非常庞大，因此采用数据挖掘技术从中进行安全模式规则的提取。
However, as the amount of the log audit date is too large, we can apply data mining technology into security mode rule extraction.
随着网络规模的扩大，日志审计系统中单个日志服务器受到处理能力的限制，已经成为系统的瓶颈。
With the expanding of network size, the transacting capability of the single log server in log audit system is limited, which has already become the bottleneck of that system.
文章分析和比较了目前的安全态势评估方法，提出了一种基于日志审计与性能修正算法的网络安全态势评估模型。
This paper analyzes and compares the existing situational awareness methods and proposes a network security situational awareness model based on log audit and performance correction algorithm.
具体对身份认证、访问控制、权限管理、日志审计、数据加密、数字签名等方面进行了研究和一定程度的实现。
The facets of customer verification, access control, authority management, log audit, data encryption, digital signature are researched and implemented to some extent.
为每个审计运行的审计类型日志。
它是否与日志记录、审计、成本计算等组织标准兼容？
Is it compatible with organizational standards for logging, auditing, costing, and so on?
安全服务器拥有配置信息，比如在线或离线策略，以及来自代理的审计日志。
The security server has configuration information, such as online and offline policies, and audit logs from the agents.
读取审计日志，要先从一个特定的网站集范围开始。
Reading the audit log begins within the scope of a specific site collection.
默认情况下，审计日志(比如违规访问)被发送到安全服务器。
Audit logs, for things such as access violations, are sent to the security server by default.
对于业务过程和人工任务，可以把事件发送到BPC数据库中特定的审计日志表。
For business processes and human tasks, there is the option to send events to specific audit log tables within the BPC database.
事件(比如违规访问)审计日志还可以由安全服务器管理。
Audit logs for events such as access violations can also be managed by the security server.
安全和审计日志、备份、启动盘、档案副本、调试信息，以及很少访问的大对象。
Security and audit logs, backups, boot disks, archival copies, debugging information, rarely accessed large objects.
需要注意，读取审计日志是一个受限制的操作，需要站点管理员权限。
Reading from the audit log is a restricted operation that requires site administrator permissions.
要想为事件启用这个功能，业务过程和人工任务需要有审计日志目的地。
Business processes and human tasks need to have the audit log destination for their events enabled to make use of this function.
存档之后，从审计日志表中删除老的条目。
Once archived, those old entries are removed from the audit log tables.
不复制审计日志。
问题可以分解成两部分：第一，轮询生产线，并检查罐子的质量；第二，写审计日志。
The problem can be split into two parts: first, polling the production lines and checking the jars' masses, and second, writing the audit log.
基本服务用于支持安全性和私密性、搜索、审计日志记录和工作流。
Base services are available to support security and privacy, search, audit logging, and workflow.
审计日志通常在安全敏感的环境中使用，其中记录对门户运行时配置的更改。
Audit logging is usually used in security-sensitive environments where changes made to the portal's run time configuration are recorded.
记住，审计日志好比从犯罪现场收集的证据：在需要它的时候才知道它是如此重要！
Keep in mind that an audit log is like evidence collected at a crime scene: it's essentially worthless unless you intend to examine it later.
因此，如果包含审计日志文件的文件系统满了，它仍然会继续将事件写到日志文件的开头。
Thus, if the filesystem that contains the audit log files fills up, it still continues to write events to the beginning of the log file.
系统必须处理三类外部实体：生产线上的称重机、工人的控制台、审计日志。
The system must deal with three classes of external entities: the weighing machines on the production lines, the worker's console, and the audit log.
服务器有许多不断增长的日志和审计文件，需要管理它们，防止它们耗尽服务器上的重要空间。
There are numerous log and audit files that keep growing in size and there is a need to manage them so that they don't grow to eat up the critical space on the servers.
如果这个数字较大，则提醒审计日志记录程序没有足够的时间进行处理，队列过大。
If this number were large, it would suggest that the audit logger was not getting enough time to work and the queue was allowed to build up.
各罐质量必须写入日志文件，以便审计。
Each jar's mass must be written to a log file for auditing purposes.
清单4展示了从审计日志提取的相同审计记录的一个片段，这次使用DELASC选项和；字段定界符。
Listing 4 shows a snippet of the same audit records that were extracted from the audit log, this time using the DELASC option with a; field delimiter.
通过CATEGORY 子句可以指定从审计日志中提取哪些类型的审计事件。
The CATEGORY clause allows you to specify which categories of audit events are to be extracted from the audit log.
我个人喜欢选用流模式，因为它以文本模式写审计日志文件，允许实时地查看审计事件。
The stream mode is my personal choice, because it offers real-time viewing of audit events due to the audit log file being written to in text mode.
应用推荐