当前,Linux下的Web服务器面临着严重的安全威胁,而Linux自身的审计机制存在着一些缺陷。本文首先介绍了Linux系统的日志信息和Apache的日志信息,然后提出了一种基于Linux的Web服务器安全审计方案,该方案将内核级的安全审计与应用程序级的安全审计有机结合起来,最后在仿真平台上对其予以实现。 At present, the Web server under Linux faces serious security threats, but there are some flaws in Linux’s own auditing mechanism. This paper first introduces the Linux system log information and Apache log information, and then proposes a Linux-based Web server security audit program that combines kernel-level security audits with application-level security audits. Finally, It is realized on the simulation platform.