防篡改日志模块: Difference between revisions

Jump to navigation Jump to search
m (ShengGang moved page 不可更改的归档日志模块 to 防篡改日志模块: 之前的翻译不准确)
Line 33: Line 33:
*停用/重新激活 防篡改日志模块
*停用/重新激活 防篡改日志模块


By unalterable, it must be understood that the maximum has been achieved to reduce the risk of modifying a record. This includes the following points:
我们必须理解'''防篡改'''已尽最大努力降低归档日志被修改的风险。这包括以下几点:


*There is no functionality in the application to delete or modify a line.
*应用程序中没有删除或变更行的功能。
*Each record of this log is protected by a checksum that depends on the data of the record, making the checksum invalid in case of an attempt to modify the record (following a database hack for example).
*此日志中的每条记录都受到依赖于记录数据的校验和的保护,如果试图更改记录(例如,在数据库遭到黑客攻击后,数据库被修改),则校验和无效。
*Each checksum is chained with the checksum of the previous record, so that it is not possible to hack a checksum chain of a record without invalidating the previous record in turn.
*每个校验和都链接到前一记录的校验和,因此不可能在修改记录的校验和链的情况下,而不使先前的记录无效。
*A program signature can be defined to validate a state of the program code and a verification tool can be used to identify if a file has been modified (e.g. as a result of a server hack) making it detectable if computer code has been modified in an attempt to bypass the unalterable log mechanism.
*可以定义程序签名以验证程序代码的状态,并且使用官方来源的验证工具来识别文件是否已被修改(例如,由于服务器被黑客攻击),使得可以检测到计算机代码是否已被修改以试图绕过防篡改日志机制。


==读取已归档的日志==
==读取已归档的日志==
To browse the list of archived event, a tool is available into menu '''Tools - Unalterable Archives/Log''' - Tab "Unalterable Logs".
要浏览归档事件清单,可使用菜单 '''工具 - 防篡改归档/日志''' - "防篡改日志"标签页 中提供的工具。


You need the permission "Read archived events and fingerprints" to be able to access this area.
您需要拥有"读取归档事件和指纹"的权限才能访问此区域。


You can filter on a date and export the list of events into a CSV file.
您可以按日期筛选并将事件清单导出到CSV文件中。
714

edits

Navigation menu