一种基于规则的安全日志范式分析模型(英文)  

A Rule-based Normal-form Model for Security Logs Analysis

作　　者：王倩[1] 陆晟[1] 龚俭[1] 

机构地区：[1]东南大学计算机科学与工程系,南京210096

出　　处：《计算机工程》1999年第S1期53-55,64,共4页Computer Engineering

摘　　要：通过日志分析，能够有效地掌握系统运行情况、加强系统维护与管理。但由于原始日志数据量大，格式多变，难以对其进行直接处理，需要寻求更为有效的分析方法。该文面向安全日志，介绍了范式分析的思想，提出了一种基于规则的安全日志范式分析模型，并给出了实现示例。Based on the analysis of system logs, we can keep track of the behavior of systems that are under management. However, as theinformation contained in the original system logs is too much and too complex to be analyzed directly, effcient methods are required tostrengthen the system maintenance and management. A new analysis method for security logs is proposed in this paper, which uses a set ofnormal-form rules for modeling the analysis. An example is arisen aIso in detail for explaining how the model works.

关 键 词：网络安全 安全管理 系统日志分析 范式模型 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]