bizhub PRO 951 2-53
2.5 Administrator Security Functions
2
Table of items saved in audit log
*1
: Audit log ID will be saved as user ID when user authentication is successfully made, or when password
inconformity occurs with a registered user name.
*2
: Audit log ID will be saved as unregistered user ID when authentication failure occurs with an unregistered
user name.
*3
: Audit log ID will be saved as secure user ID when secure print authentication in successfully made, or when
password inconformity occurs with a registered secure user name.
*4
: Audit log ID will be saved as unregistered user ID when secure print authentication failure occurs with an
unregistered user name.
The purpose of analyzing the audit log is to understand the following and implement countermeasures:
- Whether or not data was accessed or tampered with
- Subject of attack
- Details of attack
- Result of attack
For specific analysis methods, see the following description.
Specifying unauthorized actions: password authentication
If logs have NG as the result of password authentication (action: 01, 02, 11), items protected by passwords
may have been attacked.
- Failed password authentication (NG) log entries specify who made the operation, and show if unauthor-
ized actions were made when password authentication failed.
No. Operation Audit ID Stored ac-
tion
Result
1 CE authentication CE ID 01 OK/NG
2 Administrator authentication Administrator ID 02 OK/NG
3 Set/Change Enhanced Security mode Administrator ID 03 OK
4 Print audit log CE ID 04 OK
5 Change/Register CE password CE ID 05 OK
6 Change/Register administrator pass-
word
CE ID/Administrator ID 06 OK
7 Create user by administrator User ID 07 OK
8 Change/Register user password by ad-
ministrator
User ID 08 OK
9 Delete user User ID 09 OK
10 Change user attribute User ID 10 OK
11 Password authentication for user User ID
*1
/Unregistered
user ID
*2
11 OK/NG
12 Change attributes of user by user (user
password, etc.)
User ID 12 OK
13 Access to file
(Read document data)
User ID 13 OK
14 Delete file
Delete document data
User ID 14 OK
15 Change file attribute User ID 15 OK
16 Password authentication for secure
print
Secure user ID
*3
/Unreg-
istered user ID
*4
16 OK/NG
17 Access to secure print file Secure user ID 17 OK
18 Delete secure print file Secure user ID 18 OK
19 Change HDD lock password Administrator ID 19 OK
