A framework for business-oriented security audit

Dependency between business and resources that ensure the normal function of the business has increased dramatically in size and complexity. As communication network becomes larger and more complex, the need for advanced correlation between audit alarm and business is becoming urgent. This paper proposes a framework for business-oriented security audit, which bridges the gap between the management of resources and the offer of business for the customers with respect to the audit alarm. Firstly, we classify the audit log and stress on the mechanism of collecting them. Secondly, based on the audit log gathered, we generate audit alarm with event correlation. At last, according to the dependency between business and resource, we map the audit alarm to associated business.