【摘要】 为应对高校校园网的Web应用安全威胁，设计了基于ELK的日志安全威胁监测平台。首先对Web日志进行数据分析，挖掘其中的安全威胁攻击模式，形成安全监测模型库并将其应用于实时安全监测。系统运行结果证明，该平台可以发现校园网中的安全威胁，可视化关联分析便捷，能有效地提高运维效率和安全攻击排查的速度。更多还原

【Abstract】 In order to deal with the Web application security threats of campus network, a log security threat monitoring platform based on ELK is designed. The data of Web log is analyzed, and the attack patterns of security threats are mined to form a security monitoring model library, which is applied to real-time security monitoring. The system operation results show that the platform can effectively find the security threats in the campus network and facilitate visual correlation analysis, which can effectively improve the operation and maintenance efficiency as well as the speed of security attack investigation.更多还原