분산 환경에서 SysLog기반의 방화벽 통합로그관리시스템 개발
Development of the SysLog-based Integrated Log Management System for Firewalls in Distributed Network Environments
1
조회
0
다운로드
2
인용
0
참고문헌
키워드
초록
Application log files contain error messages; operational data and usage information that can help manage applications and servers. Log analysis system is software that read and parse log files, extract and aggregate information in order to generate reports on the application. In currently, the importance of log files of firewalls is growing bigger and bigger for the forensics of cyber crimes and the establishment of security policy. In this paper, we designed and implemented the SILAS(SysLog-based Integrated Log mAanagement System) in distribute network environments. It help to generate reports on the the log fires of firewalls - IP and users, and statistics of application usage.
Abstract
Application log files contain error messages; operational data and usage information that can help manage applications and servers. Log analysis system is software that read and parse log files, extract and aggregate information in order to generate reports on the application. In currently, the importance of log files of firewalls is growing bigger and bigger for the forensics of cyber crimes and the establishment of security policy. In this paper, we designed and implemented the SILAS(SysLog-based Integrated Log mAanagement System) in distribute network environments. It help to generate reports on the the log fires of firewalls - IP and users, and statistics of application usage.
참고문헌 (8)
- "인터넷침해사고 동향 및 분석 통계", 인터넷침해대센터[URL]
- 정보통신부, "정보시스템 구축 운영과 관련한 기술 가이드라인 버전 1.0" (2004), 정부혁신지방분권위원회
- 행정자치부 보안관리팀, "개인정보 침해유형 및 취약점 보안대책" (2007)
- 이동영, "SysLog기반의 통합로그관리시스템에 관한 연구", 학술발표논문집, 23(2), pp.1030~1032 (2011), 한국정보처리학회
- Chris Fry, "Security Monitoring:Proven Methods for Incident Detection on Enterprise Networks", O’Reilly
- Qiang Fu Jian, "Execution Anomaly Detection in Distributed Systems through Unstructured Log Analysis", IEEE Conference ICDM’09 (2009)
- Herrerias, J, "Log Analysis Towards anAutomated Forensic Diagnosis System", IEEEARES’10, pp.15~18 (2010)
- Matsumoto, "A Method for Analyzing Network Traffic Using Cardinality Information in Firewall Logs", Applications and the Internet (SAINT) (2010)