Abstract: The inner and external behaviors of software modules can be described with interface automata, and also the overall framework operating mechanism can be described according to component composition method of interface automata. Therefore, by using interface automata the challenges of supporting multi-DBMS protocol analysis of database activity monitoring tool based on network sniffer, distributed deployment and cooperative work of the tool can be solved. Interface automata models have been given, which contain the inner and external behavior models of the tool’s main modules and the tool overall behavior model. In the end, experiments have been performed to verify correctness and usability of the tool implemented based on the model.

Key words: database security, database activity monitoring, interface automata, protocol analysis

摘要： 使用接口自动机描述软件各模块的内、外部行为，依据接口自动机的构件组合方法来描述总体框架的运行机制，可清晰地展示出基于网络嗅探的数据库活动监控工具的多DBMS协议分析支持、分布式部署与协同工作等难点的解决。给出了该工具主要模块的内、外部行为和工具整体行为的接口自动机模型，通过实验，验证了基于该模型所实现工具的正确性和可用性。

关键词: 数据库安全, 数据库活动监控, 接口自动机, 协议分析