fips191_23
FIPS PUB 191
an audit mechanism that uses the log file as input and processes the file into meaningful
information regarding system usage and security. A monitoring capability can also be used to
detect LAN availability problems as they develop. The types of security mechanisms that could
be used to provide the logging and monitoring service are listed below.
Mechanisms
logging of I&A information (including source machine, modem, etc.),
logging of changes to access control information,
logging of use of sensitive files,
logging of modifications made to critical software,
utilizing LAN traffic management tools,
use of auditing tools.
25