摘要： 通过日志分析，能够有效地掌握系统运行情况、加强系统维护与管理。但由于原始日志数据量大，格式多变，难以对其进行直接处理，需要寻求更为有效的分析方法。该文面向安全日志，介绍了范式分析的思想，提出了一种基于规则的安全日志范式分析模型，并给出了实现示例。
关键词:
网络安全,
安全管理,
系统日志分析,
范式模型
Abstract: Based on the analysis of system logs, we can keep track of the behavior of systems that are under management. However, as theinformation contained in the original system logs is too much and too complex to be analyzed directly, effcient methods are required tostrengthen the system maintenance and management. A new analysis method for security logs is proposed in this paper, which uses a set ofnormal-form rules for modeling the analysis. An example is arisen aIso in detail for explaining how the model works.
中图分类号:
王倩,陆晟,龚俭. 一种基于规则的安全日志范式分析模型(英文)[J]. , 1999, 25(S1): 53-.
Wang Qian, Lu Sheng,Gong Jian. A Rule-based Normal-form Model for Security Logs Analysis[J]. , 1999, 25(S1): 53-.