System and a method for calculating a website risk index based on a mass Web log

A technology of risk index and calculation method, which is applied in the field of network security, can solve the problems that no web log security information is included in the evaluation scope, and achieve the effect of wide application range, strong real-time performance and easy implementation

Inactive Publication Date: 2019-01-22
ELECTRIC POWER RES INST OF STATE GRID ZHEJIANG ELECTRIC POWER COMAPNY
View PDF9 Cites 18 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0003] The present invention mainly solves the limitations of the website risk assessment in the prior art, does not include the security information provided by the Web log into the assessment scope, or lacks the combined assessment of the attack hazard and the website vulnerability threat, and provides a massive Web-based Log analysis technology, website risk assessment system and method based on real-time attack events and vulnerability CVSS scoring

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • System and a method for calculating a website risk index based on a mass Web log
  • System and a method for calculating a website risk index based on a mass Web log
  • System and a method for calculating a website risk index based on a mass Web log

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0054] The technical solutions of the present invention will be further specifically described below through the embodiments and in conjunction with the accompanying drawings.

[0055] like figure 1 and figure 2 As shown, the method for calculating website risk index based on massive Web logs in this embodiment includes a collection unit that supports massive Web log sources deployed on a Web server, a security information analysis unit and a website risk assessment unit, and the collection unit-analysis unit- The evaluation units are connected one after the other;

[0056] Acquisition unit: monitor the log file directory in real time, extract the web logs generated in real time according to a certain time interval t, preprocess the generated fields, and send them to the analysis unit;

[0057] Analysis unit: On the one hand, it receives log fields, captures sensitive fields according to the attack behavior signature database, on the other hand, it scans site vulnerabilitie...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention relates to a website risk index calculation method based on a massive Web log, comprising a collection unit supporting the massive Web log, a safety information analysis unit and a website risk assessment unit arranged on a Web server; the collection unit, the analysis unit and the evaluation unit are sequentially connected. The collecting unit monitors the log file in real time, extracts the Web log generated in real time according to a certain time interval, and pretreats the generated fields. The invention is based on massive Web log analysis, can catch Web attack events in real time, combines the CVSS value with the vulnerability of the website and the harm degree of the attack, carries out the website risk assessment, and ensures the accuracy, real-time and predictability of the assessment index.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a website risk index calculation system and method based on massive web logs. Background technique [0002] With the rapid development of the Internet, the complexity and importance of network security have become increasingly prominent. With the continuous occurrence of network attacks, the issue of network security has attracted more and more attention. Website risk assessment technology is based on the current environment of the website, analyzes the vulnerability of the current website and the threats it faces, and provides accurate and objective risk data, which is of great significance for the construction of website security and the improvement of the defense system. As an important part of network security, Web logs extract and analyze real-time attack events and provide important information for computer forensics. CVSS (Common Vulnerability Scoring System) pr...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): H04L29/06H04L29/08
CPCH04L63/1425H04L63/1433H04L63/1441H04L63/20H04L67/02
Inventor 卢新岱戴桦孔晓昀蔡怡挺姜维周辉吕磅姚影
Owner ELECTRIC POWER RES INST OF STATE GRID ZHEJIANG ELECTRIC POWER COMAPNY
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products