Abstract: This paper describes security audit event in the form of Unified Modeling Language(UML) with the idea of object oriented theory, and proposes security audit event visualization model based on the theory of colored Petri-net. Based on this model, with the file operation audit events, it gives a visualization method for time and space logic correlation of security audit event. The method provides convenience and assistant of browsing and analyzing audit data for security auditor.

Key words: security audit event, visualization, DBSCAN algorithm

摘要： 利用面向对象的思想将安全审计事件以UML的形式表示，在此基础上根据有色Petri网原理提出安全审计事件可视化模型。基于该模型，以文件类操作的安全审计事件为主线，给出一种安全审计事件时空逻辑关系可视化实现框架。该方法为安全审计员浏览、分析安全审计数据提供了便利。

关键词: 安全审计事件, 可视化, DBSCAN算法

CLC Number: 

• TP309