网络安全应急响应日志分析服务技术研究

Research on Service Technology for Log Analysis of Network Security Emergency Response

为帮助网络安全运维人员从海量日志数据中精准定位关键信息,文章重点研究了各类日志分析时的关注点和日志分析规则与技巧。基于上述技术,文章给出了一个Web日志案例的分析验证实验,实验结果表明:研究各类日志分析关注点可快速定位日常安全威胁、及时排查故障。

In order to help network security operation and maintenance personnel locate key information accurately from massive log data, this paper studies the focus and log analysis rules and techniques of various types of logs. Based on the above techniques, this paper gives an analysis and verification test of a web log case,and the test results show that studying the focus of various log analysis can locate daily security threats quickly and troubleshoot them timely.