Table of items saved in audit log – Konica Minolta bizhub PRO 951 User Manual
Page 63
bizhub PRO 951
2-53
2.5
Administrator Security Functions
2
Table of items saved in audit log
*1
: Audit log ID will be saved as user ID when user authentication is successfully made, or when password
inconformity occurs with a registered user name.
*2
: Audit log ID will be saved as unregistered user ID when authentication failure occurs with an unregistered
user name.
*3
: Audit log ID will be saved as secure user ID when secure print authentication in successfully made, or when
password inconformity occurs with a registered secure user name.
*4
: Audit log ID will be saved as unregistered user ID when secure print authentication failure occurs with an
unregistered user name.
The purpose of analyzing the audit log is to understand the following and implement countermeasures:
-
Whether or not data was accessed or tampered with
-
Subject of attack
-
Details of attack
-
Result of attack
For specific analysis methods, see the following description.
Specifying unauthorized actions: password authentication
If logs have NG as the result of password authentication (action: 01, 02, 11), items protected by passwords
may have been attacked.
-
Failed password authentication (NG) log entries specify who made the operation, and show if unauthor-
ized actions were made when password authentication failed.
No.
Operation
Audit ID
Stored ac-
tion
Result
1
CE authentication
CE ID
01
OK/NG
2
Administrator authentication
Administrator ID
02
OK/NG
3
Set/Change Enhanced Security mode
Administrator ID
03
OK
4
Print audit log
CE ID
04
OK
5
Change/Register CE password
CE ID
05
OK
6
Change/Register administrator pass-
word
CE ID/Administrator ID
06
OK
7
Create user by administrator
User ID
07
OK
8
Change/Register user password by ad-
ministrator
User ID
08
OK
9
Delete user
User ID
09
OK
10
Change user attribute
User ID
10
OK
11
Password authentication for user
User ID
*1
/Unregistered
user ID
*2
11
OK/NG
12
Change attributes of user by user (user
password, etc.)
User ID
12
OK
13
Access to file
(Read document data)
User ID
13
OK
14
Delete file
Delete document data
User ID
14
OK
15
Change file attribute
User ID
15
OK
16
Password authentication for secure
print
Secure user ID
*3
/Unreg-
istered user ID
*4
16
OK/NG
17
Access to secure print file
Secure user ID
17
OK
18
Delete secure print file
Secure user ID
18
OK
19
Change HDD lock password
Administrator ID
19
OK