Research on Awareness Method of Cloud User Abnormal Behavior Based on Log Audit
Weijie Wang, Yabin Xu · 2018
Performing log audit on operation logs, we can effectively discover the abnormal behavior of malicious users and minimize the losses. To this end, a storage and matching method based on the prefix tree for abnormal behavior rules is proposed to realize the rapid detection of abnormal behavior in the logs. However, unknown abnormal behavior could not be detected by this method. Therefore, we have also defined a variety of tags to constitute user portrait of normal user in advance. The user behavior characteristics are acquired through various means. Matching with the user portrait, we can discover the abnormal behavior of test data. The experiment result shows that the detection is fast and accurate by combining these two methods.