基于Web访问日志的异常行为检测

Abnormal Behavior Detection Based on Web Access Log

随着互联网的快速发展,各类对网站的攻击技术层出不穷,文章介绍了使用日志分析技术对海量Web访问日志进行分析的流程,同时通过使用特征字符匹配、访问频率统计分析等方法去挖掘攻击行为,并通过实际应用场景的展现,描述了在实际攻击发生后如何发现攻击源,从而提高安全威胁的检测能力。

With the rapid development of the Internet, all kinds of site of the attack technology emerge in an endless stream. This paper introduces the use log analysis of huge amount of web access log analysis process, also by using characteristic string matching and access frequency statistical analysis and other methods to excavate the aggressive behavior, through the practical application scenarios to show the described in the actual attack occurred after how to find the source of the attack, so as to improve the detection capability of security threats.