Browse Prior Art Database

Distributed Auditing in a Distributed Computing Enviroment

IP.com Disclosure Number: IPCOM000106314D
Original Publication Date: 1993-Oct-01
Included in the Prior Art Database: 2005-Mar-20
Document File: 2 page(s) / 65K

Publishing Venue

IBM

Related People

Aditham, R: AUTHOR [+4]

Abstract

Disclosed is a mechanism to obtain audit information generated in individual systems within a Distributed Environment. In local auditing, individual systems generate audit records of the events local to that system. Although, local auditing gives information about the local system, there is no capability to obtain a global view of the audit information in a distributed system. The Distributed Auditing Architecture disclosed here is aimed at getting complete audit information of a Distributed System.

This text was extracted from an ASCII text file.
This is the abbreviated version, containing approximately 52% of the total text.

Distributed Auditing in a Distributed Computing Enviroment

      Disclosed is a mechanism to obtain audit information generated
in individual systems within a Distributed Environment.  In local
auditing, individual systems generate audit records of the events
local to that system.  Although, local auditing gives information
about the local system, there is no capability to obtain a global
view of the audit information in a distributed system.  The
Distributed Auditing Architecture disclosed here is aimed at getting
complete audit information of a Distributed System.

      With Distributed Auditing Architecture, audit information from
local systems is collected and managed by a central system.

      Distributed Auditing Design: Distributed Computing Environment
(DCE), which provides various services (e.g., security, CDS, etc.)
is used a base for developing Distributed Auditing Application.

      The administrator designates a collector machine (one of the
members in the Distributed Environment) to receive audit information
from other members.  A daemon, called the Central Audit Daemon (CAD),
is executed on the Designated Collector, and a Local Audit Daemon
(LAD) is executed on each of the individual machines in the
distributed environment.

      The CAD maintains a central repository of audit information,
called the central audit trail.  The CAD periodically receives audit
information from other members of the distributed system, and adds it
to t...