A data processing method and storage device

Abstract

The present invention discloses a data processing method and a storage device, in order to at least solve the problem that the current administrator has low efficiency in querying the log data of thesession. The method comprises that: a storage device receives a log storage request, wherein the log storage request carries log data of a session; an index value of a first-level directory of the logdata is determined, wherein the index value of the first-level directory is represented by E0; an index value of a second-level directory of the log data is determined, wherein the index value of thesecond-level directory is represented by B0; an index value of a third-level directory of the log data is determined, wherein the index value of the third-level directory is represented by (X0,Y0), and the (X0,Y0) represents a coordinate which takes the X0 as the abscissa, and the Y0 as the ordinate in a first coordinate system with the (E0, B0) as the origin, the end time of the session as the abscissa system, and the start time of the session as the ordinate system; and according to the E0, B0, and (X0, Y0), the log data is stored. The technical scheme of the present invention is applicableto the technical field of storage.

Description

technical field [0001] The present invention relates to the technical field of storage, in particular to a data processing method and a storage device. Background technique [0002] Advanced persistent threat (APT) is an attack form that uses advanced attack methods to carry out long-term persistent network attacks on specific targets. From the analysis of the attack principle, the advanced nature of the APT attack is reflected in the fact that the attacker needs to accurately collect the business process information of the attack target before launching the APT attack. In the process of collecting business process information, the attacker will actively analyze the vulnerabilities of the application program used by the attacked object, and use these vulnerabilities to carry out the attack. [0003] In order to cope with APT and trace the source of information collection behavior during the implementation of APT attack, the existing technology deploys a collector at the pos...

AI Technical Summary

Problems solved by technology

[0006] The embodiment of the present invention provides a data processing method and a storage device, so as to at least solve the problem of low efficiency of the current administrator when querying session log data

Images