文献类型：期刊文献

英文题名：The design and implement of the centralized log gathering and analysis system

作者：Huang, Jian-Hua[1]; Zhang, Man-Qi[1]; Jiang, Yuan-Long[1]

机构：[1] School of Information Science and Engineering, East China University of Science and Technology, Shanghai, China

年份：2012

卷号：2

起止页码：268

外文期刊名：CSAE 2012 - Proceedings, 2012 IEEE International Conference on Computer Science and Automation Engineering

收录：EI(收录号：20124115542842)

语种：英文

外文关键词：Computer system firewalls - Pattern matching - Network management - Information management - Network security

摘要：Logs generated by network devices and systems provide important information for network management. In this paper, we describe a centralized syslog system which gathers and analyzes log messages from a number of routers, switches and firewalls. The gathered logs are filtered and categorized with regular expression, and finally stored in a MySQL database with format. Through the statistics analysis, feature-based detection on security events, the system can effectively find out abnormal behavior of network devices and ensure the network security. Some methods are found out to allow us to check if the network behavior is unusual. These perspective methods also provide the basis of network management and security strategy design for administrators, thereby strengthen further network management. ? 2012 IEEE.