.png){kind=icon}
返回
VloGraph: A Virtual Knowledge Graph Framework for Distributed Security Log Analysis
.png){kind=icon}
OA
AI
DOI：10.3390/make4020016.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
The integration of heterogeneous and weakly linked log data poses a major challenge in many log-analytic applications. Knowledge graphs (KGs) can facilitate such integration by providing a versatile representation that can interlink objects of interest and enrich log events with background knowledge. Furthermore, graph-pattern based query languages, such as SPARQL, can support rich log analyses by leveraging semantic relationships between objects in heterogeneous log streams. Constructing, materializing, and maintaining centralized log knowledge graphs, however, poses significant challenges. To tackle this issue, we propose VloGraph-a distributed and virtualized alternative to centralized log knowledge graph construction. The proposed approach does not involve any a priori parsing, aggregation, and processing of log data, but dynamically constructs a virtual log KG from heterogeneous raw log sources across multiple hosts. To explore the feasibility of this approach, we developed a prototype and demonstrate its applicability to three scenarios. Furthermore, we evaluate the approach in various experimental settings with multiple heterogeneous log sources and machines; the encouraging results from this evaluation suggest that the approach can enable efficient graph-based ad-hoc log analyses in federated settings.
Keyword:
semantic log analysis
virtual log graphs
dynamic log extraction
decentralized logquerying
forensics
期刊
M
IF:
6
论文数:
879
被引数:
1.8K
机构
引用论文
An insight into the PB1F2 protein and its multifunctional role in enhancing the pathogenicity of the influenza A viruses.png)
Virology
OAAI
VirologyIF0
OAAI分享收藏分享收藏Maternal and paternal contribution to intergenerational recurrence of breech delivery: population based cohort study母亲和父亲对臀位分娩代际复发的贡献: 基于人群的队列研究BMJOAAI
BMJIF0
OAAI分享收藏
查看更多内容