基于Web日志分析的安全审计系统的研究与设计-中国科技论文在线.PDFVIP

中国科技论文在线 基于Web 日志分析的安全审计系统的研究与 设计 周晶，辛阳** 5 （北京邮电大学网络空间安全学院, 北京 100876 ） 摘要：当今网络已经深入了社会生产生活的各个方面，大量网络安全事件的出现也让人们对 这个领域越来越重视。网络安全是正常使用网络进行各项活动的重要保障。本文对已有的相 关研究成果和实际应用的日志分析系统进行了研究，设计出基于Web 日志分析的安全审计 10 系统。明确系统的总体架构和核心模块的功能，实现对服务器、防火墙等网络设备的系统日 志、安全日志、应用日志等信息的实时采集和分析；将结果以直观的形式展示出来并提供筛 选导出日志功能来和补充系统审计的结果以达到实时性和准确性的平衡。 关键词：网络安全；Web 应用；日志分析；安全审计 中图分类号：TP393 15 The Resarch and Design of Security Audit System on Web Log Analysis Zhou Jing, Xin Yang (School of Cyberspace Security, BUPT, Beijing 100876) 20 Abstract:Nowadays, the network has penetrated into all aspects of social production and life, and a large number of network security incidents have also made people pay more and more attention to this field. Network security is an important guarantee for the normal use of the network for various activities. In this paper, the existing research results and the actual application of the log analysis system were studied, and a log analysis based Web security audit system was designed. The overall 25 architecture and the core module clear and systematic function, realize the real-time collection and analysis of servers, firewalls and other network equipment, security log system log and application log information; the results in the form of visual display screen and provide log function to supplement and export system audit results to achieve real-time and accuracy balance. Keywords: Network Security; W