A preprocess method for security audit log

摘要：

Security audit plays an important role in information system. Organizations or companies find out their security risk from it and take audit logs as evidences for testify illegal behavior. But current methods of audit log analysis are not very effective,which cause deep security risk not found. On the other hand,audit alarm cant work accurately because of static security policy. In this paper,we present a preprocess method of security audit log. Unlike other methods of computing security levels of audit events in accordance with static policy,our preprocess method buildup security levels dynamically,which combines static policy with dynamic policy. To take into the context of security audit events happened,we build up a new attribute of the security event for accurate audit alarm and analysis.

关键词： security audit audit log preprocess dynamic security policy

作者: Yao Sun Yang Tang Mengdong Chen

作者单位: Beihang University,China

会议类型: 国际会议

会议名称: 2011 International Conference on Opto-Electronics Engineering and Information Science(2011光电电子工程与信息科学国际会议 ICOEIS 2011)

会议地点: 西安

会议语种:英文

页码: 290-292

在线出版日期: 2011-12-23（万方平台首次上网日期，不代表论文的发表时间）