一种基于语言的事件流分析引擎的设计

Design and Implementation of a Language-Driven Event Stream Analysis Engine

网络结构正在变得越来越复杂,对网络的监控需求也越来越强烈。本文首先分析了入侵检测中的各种规则描述语言以及基于语言的事件关联分析引擎,在此基础上设计了一种实用的事件描述语言用来表达复杂的事件模式以及多系统的事件流。并且基于该语言,实现了一个高效的事件流分析引擎,提出了一种复杂事件检测算法。

With the development and deepening of Enterprise Information,the problem of computer security is becoming increasingly outstanding. In this paper,we propose the event model and a new event description language to express composite event pattern,de-sign and realize a event stream analysis engine to monitor events from various systems.