基于ELK的高校Web日志安全分析  

Security analysis of university Web log based on ELK

作　　者：龚锦红 凌仕勇[2] Gong Jinhong;Ling Shiyong(School of Electrical and Automation Engineering,East China Jiaotong University,Nanchang,Jiangxi 330013,China;Network Information Center,East China Jiaotong University)

机构地区：[1]华东交通大学电气与自动化工程学院,江西南昌330013 [2]华东交通大学网络信息中心

出　　处：《计算机时代》2022年第11期38-42,共5页Computer Era

基　　金：江西省教育厅科技项目“基于多维信息深度融合学习的大学生异常行为研究”(GJJ190317)。

摘　　要：为应对高校校园网的Web应用安全威胁,设计了基于ELK的日志安全威胁监测平台。首先对Web日志进行数据分析,挖掘其中的安全威胁攻击模式,形成安全监测模型库并将其应用于实时安全监测。系统运行结果证明,该平台可以发现校园网中的安全威胁,可视化关联分析便捷,能有效地提高运维效率和安全攻击排查的速度。In order to deal with the Web application security threats of campus network,a log security threat monitoring platform based on ELK is designed.The data of Web log is analyzed,and the attack patterns of security threats are mined to form a security monitoring model library,which is applied to real-time security monitoring.The system operation results show that the platform can effectively find the security threats in the campus network and facilitate visual correlation analysis,which can effectively improve the operation and maintenance efficiency as well as the speed of security attack investigation.

关 键 词：日志安全 序列模式 ELK logstash 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]