一种面向海量网络审计日志的敏感用户挖掘分析架构

A sensitive user mining analysis framework for massive network audit logs

结合目前海量日志挖掘的大数据特性,文章提出了海量网络审计日志的敏感用户挖掘分析架构设想,探讨了数据关联技术、敏感用户画像、基于用户画像的敏感用户监控、基于群体关系挖掘的敏感群体监控等在体系架构中的分层应用,并以此架构为基础,提出未来需要进一步深入研究的关键技术和初步解决方案。

Combining the big data features of current massive log mining, this paper proposes an assumption of sensitive user mining analysis framework for massive network audit logs and discusses data association technology, sensitive user portraits, sensitive user monitoring based on user portraits, sensitive groups based on group relationship mining in the architecture. Based on this architecture, we put forward key technologies and preliminary solutions that need further research in the future.