DNS log analysis method and apparatus
An analysis device and analysis method technology, applied in the Internet field, can solve problems such as the inability to determine the K value, and achieve the effect of improving the clustering effect, good clustering effect, and simple and effective calculation
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
Method used
Image
Examples
Embodiment 1
[0028] Embodiments of the present invention provide a DNS log analysis method, such as figure 1 As shown, including steps S101-S104:
[0029] S101. The DNS log analysis device acquires a DNS log and preprocesses the DNS log to obtain preprocessed log text.
[0030] Wherein, the preprocessed log text includes at least one piece of text information, and each piece of text information includes the first information corresponding to the text information.
[0031] S102. The DNS log analysis device extracts first information contained in each piece of text information from the preprocessed log text, and constructs a feature vector matrix of the first information.
[0032] S103. The DNS log analysis device determines the K value corresponding to K-means clustering of the first information included in each piece of text information according to the eigenvector matrix of the first information.
[0033] S104. The DNS log analysis device performs K-means clustering on the first informa...
Embodiment 2
[0105] An embodiment of the present invention provides a DNS log analysis device 50 for performing the above figure 1 , figure 2 or Figure 4 Steps performed by the DNS log analysis device 50 in the DNS log analysis method shown. The DNS log analysis device 50 may include units corresponding to the corresponding steps, for example, such as Figure 5 As shown, it may include: an acquisition unit 501 , a construction unit 502 , a determination unit 503 and a clustering unit 504 .
[0106] The obtaining unit 501 is configured to obtain DNS logs and preprocess the DNS logs to obtain preprocessed log texts, the preprocessed log texts include at least one piece of text information, and each piece of text information includes the The first information corresponding to the text information.
[0107] The construction unit 502 is configured to extract the first information included in each piece of text information from the preprocessed log text, and construct a feature vector matr...
PUM
Login to View More Abstract
Description
Claims
Application Information
Login to View More 