The embodiment of the invention relates to the technical field of
data analysis, in particular to a national secret log auditing
system which is characterized in that firstly, an operation behavior
record sequence generated in the running process of a national secret application
system is collected by the national secret log auditing
system, and the sequence is composed of log entries containing identity
verification information, resource access path information and state transition description information; performing context
semantic association analysis on the operation behavior
record sequence to obtain a semantic element extraction result and a
semantic dependency relationship; then performing multi-level compliance
verification based on a national secret security audit
rule system, and generating a compliance judgment conclusion of a log entry level and a cross-entry-level abnormal behavior
pattern recognition report; and finally, according to the judgment conclusion and the identification report, constructing a national secret log security auditing
result set which comprises a
risk level evaluation result, a violation evidence chain association graph and a security reinforcement strategy suggestion
list, thereby effectively improving the accuracy and comprehensiveness of national secret log auditing.