Administrative user abnormal behavior detection method based on big data log analysis

Abstract

The invention discloses an administrative user abnormal behavior detection method based on big data log analysis. The administrative user abnormal behavior detection method is implemented thorough an interface module, a preprocessing module, an analysis module, a configuration module, a service module, a visualization module and a knowledge base. Log data enter the preprocessing module through the interface module, are preprocessed by the preprocessing module and then are analyzed through the analysis module; finally, the log data enter the service module and then are displayed on the visualization module. Compared with the prior art, the administrative user abnormal behavior detection method based on big data log analysis has the advantages that a big data processing framework is used for deep excavation and analysis of administrative logs of information system internal administrative staff, abnormal behaviors of the administrative staff are found, in other words, abnormal behaviors and violation operations of the administrative staff are found, abnormality sources are traced, security of the log data is guaranteed, and practicability is high.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a highly practical method for discovering abnormal behaviors of management users based on big data log analysis. Background technique [0002] Logging is a very broad concept in computer systems, and it is an essential part of security auditing. Log data is the foundation for many enterprise applications such as troubleshooting, debugging, monitoring, security, anti-fraud, compliance, e-discovery, and many others. In order to maintain the system's own operation and protect the security of legitimate users, computer information systems generally have corresponding logs to record the information system's daily events, misoperations, alarms, errors, and the date and time of various daily operations of users. Behavior attribute information. These log information are not only used to audit user behavior, discover abnormal and illegal operations, but also assist computer...

AI Technical Summary

Problems solved by technology

Massive log data puts forward higher requirements for the efficiency of log analysis and processing. Traditional log storage and analysis methods are no longer competent for log analysis in the context of big data.

Images