数字图书馆内网安全事件联动分析引擎设计

Design of Digital Library Intranet Security Event Correlation Analysis Engine

文章设计了一个数字图书馆内网安全事件联动分析引擎,详细阐述了引擎的结构、设计思想及功能,介绍了事件采集及数据预处理、关联分析的工作流程,研究了关联分析引擎的部署,最后对关联分析引擎进行应用测试,证明了关联分析引擎的可用性和有效性。

This paper designs a correlation analysis engine about intranet security event for digital library, with special emphasis on the structure and function of the engine as well as design idea, introduces work process of event collection agent, security event pretreatment and security event correlation analysis, and then studies the correlation analysis engine deployment. At last, the correlation analysis engine application is tested, demonstrating the usability and effectiveness of the correlation analysis engine.