Method and device for storing and reading security logs and security control system

Abstract

The invention provides a method and device for storing and reading security logs and a security control system. The method comprises: deploying a database on every server of at least one server; creating at least one event list in each database according to the type of all security logs, wherein each event list is corresponding to one type of security logs; storing the to-be-stored security logs into the corresponding event list of the database, respectively, according to the type of the security logs; defining a timestamp for each security log stored in the event list; and reading the required security logs from the corresponding event list according to the timestamps of the security logs. The device includes: a deploying unit, a creating unit, a storing unit, a defining unit, and a reading unit. The security control system includes: a management module, a collection module, an analysis module and a security log storing and reading device. According to the invention, the speed of storing and reading the security logs can be improved.

Description

technical field [0001] The invention relates to the field of data processing, in particular to a security log storage and reading method, device and security management and control system. Background technique [0002] With the application and promotion of technologies such as big data and servers in the computer field, computer information security is becoming more and more important. Due to factors such as the large number of users, the large amount of data processing, and the current network environment, a large number of security logs will be generated, and it is necessary to Various types of security logs are analyzed in depth to provide a basis for computer information security decision-making and rectification. Therefore, the problem we are facing now is how to solve the problem of storing and reading massive security logs. [0003] At present, the methods for storing and reading security logs mainly include: using a centralized storage method for security logs, stori...

AI Technical Summary

Problems solved by technology

[0004] The current method of storing and reading security logs stores all security logs on the same node. Due to the large amount of security log data, the storage space will be filled in a short time, and the storage speed is slow. When the security logs need to be processed , analysis, and then use this storage node to find the required security logs from the massive security logs for reading, but the reading speed is slow. Therefore, the existing technology has slow reading and writing speeds and storage Disadvantages such as small quantity and difficult processing and analysis

Images