Web Application Auditing

Posted by Adonis L on Stack Overflow See other posts from Stack Overflow or by Adonis L
Published on 2010-04-03T14:18:34Z Indexed on 2010/04/03 14:23 UTC
Read the original article Hit count: 223

Filed under:

auditing

|

audit-trail

|

audit-tables

|

database

|

.NET

How can I audit a web application specifically database changes, when the application is connecting to the database as a system account?

I would like to use a simple database trigger to write to an audit table but I am unsure of how I would be able to add the user that is logged on instead of the account that is actually doing the work.

I have read a few articles on identity flow but I do not fully understand the concept.

© Stack Overflow or respective owner

Related posts about auditing

Unified Auditing - Das neue Auditing in Oracle Database 12c

as seen on Oracle Blogs - Search for 'Oracle Blogs'
In Datenbanken werden fast immer vor allem wichtige Informationen abgelegt. Der Zugriff darauf unterliegt in der Regel gesetzlichen oder betrieblichen Auflagen. Weil der Nachweis, dass diese Auflagen eingehalten werden, ausschliesslich über das Auditing möglich ist, ist eine Datenbank ohne Auditing… >>> More
What tool or scripts do you use to audit a Linux box?

as seen on Server Fault - Search for 'Server Fault'
I use the following tools for my auditing needs A) System Auditing and Hardening (One time) 1) Linux Security Auditing Tool (Security centric,Text based output ) 2) Dmidecode ( Retrieves info from BIOS ) 3) Systeminfo ( Generates a nice html report) 4) Syssumm (Inactive since Oct 2000) 5) Rootkit… >>> More
Database Level Auditing with Microsoft SQL Server 2008

as seen on Internet.com - Search for 'Internet.com'
MAK shows us how easy it is to create a database level audit, test the audit and retrieve the audit records in Microsoft SQL Server 2008. >>> More
Setting default auditing as recommended by Oracle

as seen on Internet.com - Search for 'Internet.com'
If you dont know where to start when setting Oracle auditing parameters, just start with what Oracle recommends. In this article, we set the default auditing as recommended by Oracle. >>> More
Oracle 11g Security &#150; Guidelines for Auditing

as seen on Internet.com - Search for 'Internet.com'
Oracle focuses on the default settings for just about all of the security setup in "The Oracle 2-Day Security Guide". As we draw near the close of the book, we'll examine a few guidelines for auditing. >>> More

Related posts about audit-trail

MySQL db Audit Trail Trigger

as seen on Stack Overflow - Search for 'Stack Overflow'
I need to track changes (audit trail) in certain tables in a MySql Db. I am trying to implement the solution suggested here. I have an AuditLog Table with the following columns: AuditLogID, TableName, RowPK, FieldName, OldValue, NewValue, TimeStamp. The mysql stored procedure is the following (this… >>> More
Creating a standard audit trail in Oracle Database 11g

as seen on Internet.com - Search for 'Internet.com'
Turning on auditing is easy; knowing what to do with it is entirely different. Learn how to create a standard audit trail using Oracles Enterprise Manager. >>> More
Change Data Capture or Change Tracking - Same as Traditional Audit Trail Table?

as seen on Stack Overflow - Search for 'Stack Overflow'
Before I delve into the abyss of Microsoft documentation any deeper, I'd like to know if someone experienced with Change Data Capture and Change Tracking know if one or both of these can be used to replace the traditional ... "Audit trail table copy of the 'real table' (all of the fields of… >>> More
Best practices for SQL Server audit trail

as seen on Server Fault - Search for 'Server Fault'
I'm facing a situation today where it would be very beneficial to me and my company if we knew who had logged into SQL and performed some deletions. We have a situation where at least 2 (sometimes 3) people login to SQL using SQL Server Management Studio, and perform various functions. What we need… >>> More
Implementing Audit Trail- Spring AOP vs.Hibernate Interceptor vs DB Trigger

as seen on Stack Overflow - Search for 'Stack Overflow'
I found couple of discussion threads on this- but nothing which brought a comparison of all three mechanism under one thread. So here is my question... I need to audit DB changes- insert\updates\deletes to business objects. I can think of three ways to do this 1) DB Triggers 2) Hibernate interceptors 3)… >>> More