Title page for etd-0630110-195328


[Back to Results | New Search]

URN etd-0630110-195328
Author Jui-lin Hung
Author's Email Address m964020015@student.nsysu.edu.tw
Statistics This thesis had been viewed 5355 times. Download 2298 times.
Department Information Management
Year 2009
Semester 2
Degree Master
Type of Document
Language zh-TW.Big5 Chinese
Title A Study of Log Patternization for Linux-based Systems
Date of Defense 2010-04-13
Page Count 65
Keyword
  • Log analyzer
  • Log patternization
  • String Similarity Comparision
  • Abstract With the rapid development of Internet technology, as well as extensive use of broadband networks, the issues of network security are increasing. In order to deal with these complex issues, network adminstrators adopt firewalls, intrusion detection systems, intrusion prevention systems to prevent them, in addition, the collection and analysis of log are also very important. By the log analysis, administrators can understand the error messages generated by system and the abnormal behavior of external connections, and develop the corresponding security policy on the use of the security tools. The current log analyzer, besides default rules, administrators have to spend much time reviewing the syslog of their system in detail to set the corresponding rules for their system, and each analyzer has its own unique rules of definitions. The purpose of this study is to transform tens of thounds of logs into a small number of valuable patterns, classify these patterns into abnormal ones and normal ones, and sum up the logs corresponding with listed patterns to assist administrator to review. In this study, we adopt the concept of string similarity comparison, and do similarity comparison for each log to find out all patterns which presented by regular expression. After experimental evaluation, this study can indeed analyze and generate all patterns of logs automatically, and these patterns can be applies to a practical tool of network security.
    Advisory Committee
  • Wei-Po Lee - chair
  • Sheng-Tzong Cheng - co-chair
  • Bing-Chiang Jeng - advisor
  • Chia-Mei Chen - advisor
  • Files
  • etd-0630110-195328.pdf
  • indicate accessible in a year
    Date of Submission 2010-06-30

    [Back to Results | New Search]


    Browse | Search All Available ETDs

    If you have more questions or technical problems, please contact eThesys