A Security Analysis of Web Users' Behavior Based on Web Log Mining
Hong Liu, Zheng Huang, Hua Zhang, Jingshan Lv · International Conference on Multimedia Information Networking and Security · 2013
As an important part of Web application security, a web access log records the attack traces of malicious users. But it's hard to accurately capture the attack behaviors from massive amounts of logs. A security analysis of web users' behavior based on web log mining is presented in this paper. We extract security events from the logs by rule matching and statistical analysis, and find sequential pattern of attacks by using a sequential mining method called Prefix Span. Applying it to the web access log of a website, a brief but accurate analysis result is acquired. With the result, we can easily figure out the security vulnerabilities of the website.