A Visualization Method Based on Graph Database in Security Logs Analysis

摘要：

　　Network security logs can provide evidence for forensic investigators.However,the network logs are facing the problems of high repetition rate,high false alarm rate,uniform format and so on,which make it difficult for forensic researchers to find useful information.In this paper,the association rules mining algorithm is used to analyze the network security logs,so as to eliminate the redundant data and to find the implied association between the logs data.Then the graph database is used to visualize the log information.Forensic analysts can obtain effective evidence by observing the graph database,which can improve the efficiency of the forensic analysts to discover the sensitive event information.

关键词： Network Forensics Log Analysis Association rule mining Graph Database

作者: Xinyu Tang Chunguang Ma Min Yu Chao Liu

作者单位: College of Computer Science and Technology,Harbin Engineering University,Harbin,China;Institution of College of Computer Science and Technology,Harbin Engineering University,Harbin,China Institution of Information Engineering,Chinese Academy of Sciences,Beijing,China;School of Cyber Sec Institution of Information Engineering,Chinese Academy of Sciences,Beijing,China

会议类型: 国际会议

会议名称: 2017 6th International Conference on Advanced Materials and Computer Science (ICAMCS 2017) 2017年第六届先进材料与计算机科学国际会议(ICAMCS 2017)

会议地点: 郑州

会议语种:英文

页码: 1-8

在线出版日期: 2017-04-29（万方平台首次上网日期，不代表论文的发表时间）