A record of transactions in an information system that provides verification of the activity of the system. The simplest audit trail is the transaction itself. If a person's salary is increased, the change transaction includes the date, amount of raise and name of authorizing manager.
A more elaborate audit trail can be created when the system is being verified for accuracy; for example, samples of processing results can be recorded at various stages. Item counts and hash totals are used to verify that all input has been processed through the system.
Routine Queries Are Typically Exempt
An audit trail can include any activity whatsoever, but transactions that do not effect a change are often not recorded. For example, ad hoc searches and database lookups may not be identified in an audit trail. However, if queries and searches are monitored and recorded, they can be invaluable for tracking a malicious hacker or employee. See information security.
A more elaborate audit trail can be created when the system is being verified for accuracy; for example, samples of processing results can be recorded at various stages. Item counts and hash totals are used to verify that all input has been processed through the system.
Routine Queries Are Typically Exempt
An audit trail can include any activity whatsoever, but transactions that do not effect a change are often not recorded. For example, ad hoc searches and database lookups may not be identified in an audit trail. However, if queries and searches are monitored and recorded, they can be invaluable for tracking a malicious hacker or employee. See information security.
 | Reproduced with permission from Computer Desktop Encyclopedia. Copyright (c) 1981-2008 The Computer Language Company Inc. All rights reserved. |
Additional Resources
- Ticking bombs in enterprise land
- I believe the enterprise software industry is heading for major problems. It started when I read Francine McKenna where she talks about what she sees as a doomsday scenario for at least one of the Big Four audit businesses. Francine's focus is on questioning the effectiveness of current methods for...
- Blog posts 2008-07-07
- I have to stop using Gmail :(
- I have to stop using Gmail :(You can enable POP3 support in Gmail...If you switch on POP3 support in Gmail, then you can still comply with archiving procedures: http://mail.google.com/support/bin/answer.py?hl=en&answer=13273That way, you can both send and receive e-mails with an e-mail client like Thunderbird or Evolution or even Outlook Express. I...
- Discussion threads 2008-07-03
- NoScript vs. Internet Explorer 8 Filters
- NoScript vs. Internet Explorer 8 FiltersThink About End UsersI've tried, a couple of times, to use NoScript in my normal surfing, and it became unbearable quickly. Too many sites were disfunctional. MLB.com is a good example.It's one thing to make an add-in for technical users that they can tweak on...
- Discussion threads 2008-07-03
- Nvidia whacked over defective notebook chips; Offers driver to keep processors cool
- Updated: Nvidia said its fiscal second quarter revenue will fall well short of targets because of weak demand, pricing pressure from AMD's ATI and a faulty graphics processors on older notebook systems. In an SEC filing, the company said it is offering a driver that keeps fans running to relieve...
- Blog posts 2008-07-03
- Matasano ships Web-based firewall manager
- The firewall is one of the few security tools that has been proven to be very effective at improving a company's security posture. However, staying on top of policies -- and responding to change requests -- while trying to manage multiple firewalls from different vendors can be a never-ending nightmare...
- Blog posts 2008-07-02
- What your own open source census can get you
- What your own open source census can get youGood points DanaThis is a recurring theme. The IT group in a company are using open source for many projects, meanwhile the CIO doesn't think they need an audit or a governance plan because open source is not being used.I recently wrote...
- Discussion threads 2008-07-02
- Google ships open-source Web security assessment tool
- The Google security team has released a free, open-source Web app security assessment tool capable of flagging vulnerabilities and potential security threats in Internet-facing applications. The tool, called Ratproxy, is described as a passive Web application security audit tool designed to analyze legitimate, browser-driven interactions with tested Web...
- Blog posts 2008-07-01
- Mazemerize Screensaver (exe)
- Solid blocks are drawn around the entire screen in a maze pattern, in various shades of a random color. When a trail runs out of room to place blocks, a new trail is started. When the screen is full, it starts again with a new color. Looks slightly Aztec. This...
- Software downloads 2008-06-30
- DEKSI Network Audit (exe)
- DEKSI Network Audit provides a complete software and hardware inventory of all your network p.c.'s. DEKSI Network Audit is an extremely powerful, feature rich, advanced, but easy to use software system designed to provide network administrators with comprehensive and detailed reporting on all the software and hardware inventory installed on...
- Software downloads 2008-06-30
- Embotics V-Commander 2.0
- Management of virtualized resources appears to loom large in the thoughts of suppliers. The most recent supplier to present their view of how to regain control of the environment is Embotics. The company's V-Commander V2.0 was the topic of the day. Embotics insists that this product will help organizations with...
- Blog posts 2008-06-27
- PCAuditor (exe)
- PCAuditor is a free, Personal, PC Audit and Inventory Tool. Based upon the powerful system scanning functionality of AssetStudio, PCAuditor, builds a detailed hardware and software inventory of your PC and displays the results in your Web Browser. This version is the first release on CNET Download.com.
- Software downloads 2008-06-26
- Lack of RFID standards leads to media panic
- Lack of RFID standards leads to media panicActive vs. Passive RFID DevicesIn addition to the comments above, it was not clear from the article I read whether the researchers were testing only active RFID or both active and passive RFID. The author of the article I read also implied...
- Discussion threads 2008-06-25
- Sorry Simon, but you're still screwing up
- Sorry Simon, but you're still screwing upSorry Dana, but you scewed upHi Dana,I totally agree that more transparency would be a good thing for Sun and its products and projects, and more openness would be the next big step. Beyond that I don't agree with much that you wrote here.>...
- Discussion threads 2008-06-24
- Microsoft ships free code auditing tools to thwart SQL injection attacks
- Microsoft ships free code auditing tools to thwart SQL injection attacksSQLs failureSQL's #1 failure is its ailing concept that a single string is a sufficient API. Its stronger APIs are left in disuse by those who advocate this policy. Injection follows.I've never heard of a perl script falling...
- Discussion threads 2008-06-24
- Start-up sues Google over e-mail switching tool
- Start-up sues Google over e-mail switching toolSo much for "do no evil"tisk tiskyou cant sign confidentiality statements with a company for a specific product, then create similiar code that works and say.. "i made this on my own". Bet google just buys this company.Prior art......Importing data from one email...
- Discussion threads 2008-06-24
- How Snow Leopard can save Mac OS X from malware attacks
- Guest Editorial by Dino Dai Zovi As reported by Intego and Matasano Security, a new local privilege escalation vulnerability has been found that gives local root access on Mac OS X Tiger and Leopard. While Intego calls this a critical vulnerability, I'm mostly with...
- Blog posts 2008-06-23
- House approves telecom immunity in 'compromise'
- House approves telecom immunity in 'compromise'Bush finally managed to do in the Constitution and Bill of RightsIn one blow, done, gone, end of the representative republic that used to be the United States of America.Long live the Republic of Socialist Horrors I Totalitarianism.God Save the World Now.How exactly is this...
- Discussion threads 2008-06-23
- IT work is 'boring,' students
- IT work is 'boring,' studentsThey're right. It can be boring.It's nothing like where I came from doing CAD drawings and design work.There's a [i]lot[/i] more boring paperwork in this position then I imagined.Why do you think I stop here from time to time?RE: IT work is 'boring,' studentsIts all in...
- Discussion threads 2008-06-23
- System Cleaner (exe)
- Every day your hard drive gets littered with file fragments and debris you can't see. Unwanted files from daily usage and Internet surfing can build up over time, slowing down your system's performance and leaving a trail of your Web-browsing habits for anyone to see. System Cleaner enables you to...
- Software downloads 2008-06-19
- Gateway FX541XT
- Gateway's FX541XT occupies a strange gaming PC middle ground. At $3,500, it's not in the same price category as high-end PCs such as Dell's XPS 730 H2C, but it's also about $2,000 more than the emergent $1,500 gaming desktop we've seen this year, most recently in the Maingear Prelude....
- Product reviews 2008-06-18
Neighboring Terms
Premier Vendor Content Whitepapers, webcasts & resources from our Power Center Sponsors
- The Cisco Mobility Resource Center is your source for FREE mobility solutions
-
The Cisco Mobility Resource Center offers FREE videos, downloads, podcasts and more, all designed to help small and medium businesses get mobile connectivity solutions, improve productivity and drive sales and revenue.
- New mobility solutions at the Cisco Mobility Resource Center
- Marc Canter: The master of multimedia speaks
-
In this Super Techies interview, larger-than-life techie Marc Canter talks with ZDNet's Editor in Chief Dan Farber about his career as a multimedia pioneer.
- Watch the video >>
- View exclusive resources for Intel Premier IT Professionals
-
Designed specifically to address the concerns of senior IT managers at organizations with more than 100 employees, the Intel Premier IT Professional Program provides best practices via local and e-Seminars and a members-only Web site.
- Sign-up free and access best practices resources >>
