Mechanism of system audit based on date mining technology
Wu Xiao · Jisuanji gongcheng yu sheji · 2007
A mechanism of system audit based on date mining technology is proposed.The mechanism is based on Windows operating system,it is used to audit system's logs and record the user's operation,it finds out rules from these records using data mining algorithm, and finds attack events and hidden trouble things.Lucubrating the Apriori algorithm,an enhanced algorithm associating divide data and temporary table is put forward.By comparing and analyzing,better efficiency and performance is obtained.