摘要
随着信息系统的增多以及系统复杂度的增加,信息安全防护系统也越来越复杂、越来越重要,随之产生了海量的日志,使得传统的日志审计系统已无法有效胜任分析工作。为此,文章结合基于事件聚合分析和关联分析技术的安全管理平台应用,对其技术原理进行了研究,总结了应用成效。
With the development of information system and the increasing of system complexity, information security system is more and more complex and important, and it produces massive logs .The traditional log audit system has been unable to effectively complete the work of analysis. With the application of security management platform based on event aggregation analysis and association analysis technology, this paper studies the technical principle, and summarizes its application effect.
出处
《信息网络安全》
2013年第7期91-92,共2页
Netinfo Security
关键词
日志分析
聚合分析
关联分析
安全管理平台
log analysis
aggregation analysis
association analysis
security management platform
