The sybsecurity device is created as part of the auditing installation process, storing the sybsecurity database and the system procedures with which to configure auditing.
The auditing system records system security information in an Adaptive Server audit trail. You can use this audit trail to monitor the use of Adaptive Server or system resources.
See Auditing in the Security Administration Guide.