作者: M. Bishop
DOI:
关键词:
摘要: The central role of audit trails, or (more properly) logs, in security monitoring needs little description, for it is too well known any to doubt it. Auditing, the analysis a part not only computer system but also analyzing financial and other non-technical systems. As this process, often necessary reconcile logs from different sources. This speaks need standard logging format. A log format robust enough meet heterogeneity, transportability across various network protocols, flexibility sufficient variety very environments must satisfy two basic properties: extensibility portability. report presents author`s proposed record. In section 3, he shows how where translation should be done, 4 demonstrates records several disparate systems would put into Section 5 concludes with some observations suggestions future work.