Syslog协议的安全漏洞

The Security failings in Syslog protocol

Syslog协议有着非常优秀的网络日志管理机制,提供了网络日志的存储方法和传输通道。但是该协议在网络信息安全方面存在着缺乏数据加密、传输加密与认证等多个漏洞,若不加改进地直接应用可能会导致非常严重的安全问题。本文将对这些漏洞进行详细的分析与阐述。

Syslog protocol is a very excellent management mechanism in network, it afford the storage method and the transport channels of network logs. But there are some security failings in Syslog protocol, such as data encryption, transport encryption and authenticity, etc. It will induce some very serious security problems if Syslog protocol been used without any improved. This paper will analyze and expatiate on these failings particularly.