Unlock instant, AI-driven research and patent intelligence for your innovation.

Correlation analysis method, system, convergent correlation device and distributed correlation device

A correlation analysis and distributed technology, applied in the field of communication, can solve the problems of high processing load and reduced processing performance of correlation analysis equipment, and achieve the effect of improving processing performance and reducing processing load.

Active Publication Date: 2012-05-02
CHENGDU HUAWEI TECH
View PDF0 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0005] During the research and practice of the prior art, the inventors of the present invention found that in the prior art, the correlation analysis device needs to perform rule matching on all the logs, resulting in a large processing load of the correlation analysis device and reducing the processing performance

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Correlation analysis method, system, convergent correlation device and distributed correlation device
  • Correlation analysis method, system, convergent correlation device and distributed correlation device
  • Correlation analysis method, system, convergent correlation device and distributed correlation device

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0024] Embodiments of the present invention provide a correlation analysis method and system, a converged correlation device and a distributed correlation device, which can save network bandwidth and improve processing performance. Each will be described in detail below.

[0025] see figure 1 , an embodiment of the association analysis method in the embodiment of the present invention includes:

[0026] 101. The aggregation and association device obtains all matching rules of the association rules configured by the user, and assigns an identifier to each matching rule;

[0027] The user-configured association rules include matching rules and logical relationships between matching rules.

[0028] Obtaining all matching rules of the association rules configured by the user by the converging and association device is an existing technology, and details are not described here.

[0029] After assigning identifiers to the matching rules, the converging and associating means can d...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The embodiment of the invention discloses a correlation analysis method, comprising the following steps: acquiring all matching rules of correlation rules configured by a user, distributing an identification to each matching rule; sending the matching rules and the corresponding identifications to a distributed correlation device; receiving the identifications of the matching rules hit by a journal reported by the distributed correlation device; if correlation rules are judged to be met according to the received identifications, a special correlation event is generated according to preset correlation strategies. The embodiment of the invention also provides corresponding equipment and a system, and can improve processing performance.

Description

technical field [0001] The present invention relates to the field of communication technology, in particular to a correlation analysis method and system, a converged correlation device and a distributed correlation device. Background technique [0002] As the degree of informatization continues to increase, the degree of dependence on information systems also increases. Therefore, how to ensure the security of information systems is a problem that people are very concerned about. The security status of the information system can be reflected in the logs of the equipment. For a fault phenomenon or attack behavior, it is necessary to correlate and analyze the logs of several or even dozens of devices to determine the real cause of the fault. [0003] Association analysis based on association strategy is a commonly used association analysis scheme at present. Correlation policies describe that when a correlation rule is satisfied, a correlation event that needs to be processed...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Patents(China)
IPC IPC(8): G06F17/30G06F11/34H04L12/24
Inventor 张锞斌
Owner CHENGDU HUAWEI TECH