Intelligent device log processing system and method

Abstract

The invention discloses an intelligent device log processing system and method, and relates to an Internet of Things intelligent device log processing system. The system comprises a log obtaining device used for obtaining an original log of an intelligent device according to parameters of the intelligent device; a log parser used for receiving the original log, parsing the unstructured or semi-structured original log into a structured log and generating a log sequence; a security rule base comprising log analysis rules; a log analysis engine used for receiving the structured logs and the log sequences, carrying out rule matching on the structured logs according to log analysis rules of the security rule base, and carrying out hierarchical clustering on the log sequences; a log analysis reporting device used for generating a report according to the result of the log analysis engine and the security rule base; and a user interface module used for interacting with a user, receiving the parameters of the intelligent equipment and outputting the report to the user. The intelligent device log processing system and method are efficient, simple and accurate in log obtaining.

Description

technical field [0001] The invention relates to the technical field of a log processing system for an intelligent device of the Internet of Things, in particular to a log processing system for an intelligent device and a processing method thereof. Background technique [0002] At present, there are many audit methods for logs, including audit methods based on rule base, data mining, immune system and neural network. The audit detection accuracy based on the rule base is high, but it is not suitable for changing network attacks. Auditing based on data mining can handle large-scale data files, but the accuracy rate needs to be tuned. Auditing based on evolutionary algorithms can effectively optimize auditing through multiple dimensions, but it cannot detect simultaneous attacks. Auditing based on the immune system can detect attacks with memory and pathogens, but cannot judge attacks with race conditions and identity masquerade. Among them, the audit method based on the rul...

AI Technical Summary

Problems solved by technology

[0005] In view of this, the purpose of the present invention is to propose a smart device log processing system and its processing method, which are used to solve the problems in the background technology that the smart device log is difficult to obtain and the log audit effect is not good. It has the advantages of simple log acquisition and excellent audit effect specialty

Images