A Visualization Method Based on Graph Database in Security Logs Analysis
Xinyu Tang, Chunguang Ma, Min Yu, Chao Liu · 2017
Network security logs can provide evidence for forensic investigators.However, the network logs are facing the problems of high repetition rate, high false alarm rate, uniform format and so on, which make it difficult for forensic researchers to find useful information.In this paper, the association rules mining algorithm is used to analyze the network security logs, so as to eliminate the redundant data and to find the implied association between the logs data.Then the graph database is used to visualize the log information.Forensic analysts can obtain effective evidence by observing the graph database, which can improve the efficiency of the forensic analysts to discover the sensitive event information.