Table Of Items Saved In Audit Log - Oce CS665 Pro User Manual

Machine administrator security functions
4.5

Table of items saved in audit log

No. Operation
1 CE authentication
2 Manager authentication
3 Set/change Security Strengthen mode
4 Print audit log
5 Change/register CE password
6 Change/register Machine Administrator
password
13 Change HDD lock password
The purpose of analyzing the audit log is to understand the following and implement countermeasures:
Whether or not data was accessed or tampered with
Subject of attack
Details of attack
Results of attack
For specific analysis methods, see the next page.
Specify unauthorized actions: password authentication
If logs have NG as the result of password authentication (action: 01, 02), items protected by passwords may
have been attacked.
- Failed password authentication (NG) log entries specify who made the operation, and show if
unauthorized actions were made when password authentication failed.
- Even if password authentication succeeded (OK), it shows whether a legitimate user created the action.
You need to check carefully when successful authentication occurs after series of failures especially
during times other than normal operating hours.
Specify unauthorized actions: actions other than password authentication under security
All operation results other than password authentication will be indicated as successful (OK), so determine if
there were any unauthorized actions by ID and action.
- Check the time, and see if the user who operated the specific subject made any unauthorized actions.
Actions to take if unauthorized operations are found
If it's found that a password has been leaked after analyzing the audit log, change the password immediately.
CS665 Pro
ID
CE ID
Machine Administrator ID
Machine Administrator ID
Machine Administrator ID
CE ID
CE ID/ Machine Administrator
ID
Machine Administrator ID
4
Stored Result
action
01 OK/NG
02 OK/NG
03 OK
04 OK
05 OK
06 OK
19 OK
4-13