Weblog auditing system for network monitoring

Abstract

The invention relates to network security monitoring, in particular to a weblog auditing system for network monitoring, which comprises a server and a data acquisition module, and is characterized inthat the server is connected with a file storage module for storing file data acquired by the data acquisition module; the server is connected with a log storage module used for storing log data acquired by the data acquisition module; and the server is connected with a data packet integration module used for integrating file data and the log data into a data packet. According to the technical scheme provided by the invention, the defects that the network security flow log data format is disordered and is inconvenient to store and a large amount of repeated redundant log data exists in the prior art can be effectively overcome.

Description

technical field [0001] The invention relates to network security monitoring, in particular to a network log auditing system for network monitoring. Background technique [0002] Network traffic logs record every bit of what happens in the network. By analyzing network traffic logs, you can locate and deeply analyze security events in the network environment and discover abnormal behaviors of users inside the network. At present, most of the network log auditing systems analyze and audit the network traffic according to the protocol type and content. Most of the traffic anomalies are real-time, based on the time window division of static or dynamic thresholds, and monitor the entire network. In this way, it is impossible to identify and judge the periodic anomalies of individual users. Therefore, it is necessary to build an offline network log audit system. necessary. [0003] The amount of data in network security traffic logs is very large. How to effectively store and ma...

AI Technical Summary

Problems solved by technology

[0006] Aiming at the above-mentioned shortcomings in the prior art, the present invention provides a network log audit system for network monitoring, which can effectively overcome the chaotic data format of the network security traffic log in the prior art, which is inconvenient to store, and there is a large amount of repetitive redundancy. Flaws in remaining log data

Images