User behavior auditing method and file storage method

Abstract

The invention discloses a user behavior auditing method and a file storage method. Files of the same type are merged and put into a large storage space, and unified file type description information of the type of file is eliminated, thereby reducing file size; besides, massive user behavior data files use the same file type description information as meta-information description of a file volume,so the problem of low metadata management of a file system in the prior art can be solved. And the user behavior data files of the same file type are merged and stored, so when the files are read andwritten, the file opening number can be effectively controlled, file opening system calling does not need to be repeatedly executed for reading and writing continuous files, so the system consumptionis greatly reduced, and the file reading efficiency is improved. For reading and writing of random files, due to the fact that multiple files stored in a combined mode can be opened at the same time,file opening system calling consumption can also be greatly reduced, and file reading efficiency is improved.

Description

technical field [0001] The present invention relates to the field of information security, in particular, the present invention relates to a user behavior auditing method and a file storage method. Background technique [0002] With the rapid development of information technology and the development of network information system applications, the level of government and enterprise network applications is deepening, making information security issues increasingly prominent. Such as unauthorized access to the internal business system, abuse and misuse of business resources, which damage the normal operation of the business system; behaviors such as chatting, stock trading, playing online games, BT downloads, and online videos that affect work efficiency during working hours; Sending sensitive and confidential information through e-mail, instant messaging, etc. without authorization, resulting in the leakage of confidential information and key business data; using the Internet ...

AI Technical Summary

Problems solved by technology

Due to the needs of data analysis, user behavior data files are required to be sent to the audit server in the data center for unified analysis and processing. However, the performance of IoT devices that collect massive data is generally low, and they do not have a stable network, and the bandwidth of data transmission is also limited. Very limited, so user behavior data needs to be stored on IoT devices for a considerable period of time before being sent to the data center, but IoT devices rely on the file system of the operating system to manage files when storing files, and common file systems will be for each A file creates a metadata to describe and manage the file. When reading a file, at least 3 disk IO accesses are required. When the number of stored files is small, the efficiency is acceptable, but the number of files exceeds tens of millions After the level, the efficiency of file reading and writing will be greatly reduced. In addition, in common file reading and writing, there are usually the following system call processes: file open -> file addressing -> file reading and writing -> file closing, for each For a file access, it has to go through the file opening process, and this process is a very expensive system call process.

When there are a large number of files, the reading and writing of files will take a lot of time

Images