一种面向海量网络审计日志的敏感用户挖掘分析架构  

A sensitive user mining analysis framework for massive network audit logs

作　　者：李栋科 Li dongke(Pingdingshan Public Security Bureau,Henan Pingdingshan 467000;Guizhou Police College,GuizhouGuiyang 550005)

机构地区：[1]平顶山市公安局网安技侦支队,河南平顶山467000 [2]贵州警察学院,贵州贵阳550005

出　　处：《网络空间安全》2018年第4期84-88,共5页Cyberspace Security

摘　　要：结合目前海量日志挖掘的大数据特性,文章提出了海量网络审计日志的敏感用户挖掘分析架构设想,探讨了数据关联技术、敏感用户画像、基于用户画像的敏感用户监控、基于群体关系挖掘的敏感群体监控等在体系架构中的分层应用,并以此架构为基础,提出未来需要进一步深入研究的关键技术和初步解决方案。Combining the big data features of current massive log mining, this paper proposes an assumption of sensitive user mining analysis framework for massive network audit logs and discusses data association technology, sensitive user portraits, sensitive user monitoring based on user portraits, sensitive groups based on group relationship mining in the architecture. Based on this architecture, we put forward key technologies and preliminary solutions that need further research in the future.

关 键 词：大数据 网络审计日志 敏感用户 挖掘分析 

分 类 号：TP39[自动化与计算机技术—计算机应用技术]