基于日志挖掘的Web service安全关联规则挖掘算法及应用  

Algorithm and application for mining Web service security association rules based on log mining

作　　者：杭正波[1] 杨鹤标[1] 邹盼盼[1] 陈锦富[1] 

机构地区：[1]江苏大学计算机科学与通信工程学院,江苏镇江212013

出　　处：《计算机应用研究》2012年第5期1802-1805,共4页Application Research of Computers

基　　金：国家自然科学基金资助项目(61063013);国家教育部博士点专项基金资助项目(20103227120005)

摘　　要：针对传统的Web service安全性测试方法存在的低效性和盲目性,提出了一种基于Web service日志挖掘的安全关联规则挖掘算法,并阐述了算法的应用环境。通过该算法挖掘出正常行为的关联规则,采用错误注入的方式对Web service注入预先设计的构造算子,并把执行后的日志与关联规则进行比较,进而发现Web service存在的安全性问题。实验结果表明,该算法较大地提高了日志挖掘的效率及覆盖率,同时应用该算法能较好地检测出Web service的安全性问题,进一步表明提出的算法是可行有效的。To solve the inefficiency and blindness of the traditional method of security testing,this paper proposed a new log mining algorithm based on Web service and described the applied environment of the algorithm.The association rules were mined from the normal behavior by this algorithm.It injected the mutation operator into the Web service by fault injection method,compared the execution log with the association rules,and then found out the security problems existed in Web service.The results show that the algorithm can greatly improve the efficiency and coverage rate of log mining and detect the problems of Web service better.The proposed algorithm is feasible and effective.

关 键 词：日志挖掘 关联规则挖掘 安全性测试 错误注入 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论] TP391[自动化与计算机技术—计算机科学与技术]