A REALTIME MONITORING METHOD BASED ON LOG DATA

摘要

PURPOSE: A real-time monitoring method based on log data capable of defending secret leakage attempt is provided to extract and map a key expressing the character of a data item from different kinds of application logs. CONSTITUTION: A real-time monitoring method based on log data capable of defending secret leakage attempt comprises the following steps: extracting a first key expressing the character of a data item from a first application log(210); extracting a second key corresponding to the first key from a second application log(220); setting the correlation of the logs by mapping the first and second keys(230); selecting data obtaining the usage authority for a file object from the logs(240); monitoring a generating process of new data corresponding to the selected data in real time(250); and detecting log data having the output authority for the file object from the monitored data(260).