Log system design in support of linkage analysis of security audit and computer forensics
Peiyu Liu · Jisuanji gongcheng yu sheji · 2009
The log search and analysis system is lack of comprehensive data mining,and also there is no specific log protect and analysis system for both security audit and computer forensics on home and abroad.Aiming at this situation,a comprehensive log analysis platform on support of the security audit and computer forensics is presented.The build,acquisition,management and protection of a security log file system is described,which implements the linkage analysis of security audit and computer forensics.A high-confidence basic general model in support of security audit and computer forensics is formed.The system interface and system performance analysis are given.