Method and apparatus for analyzing web server log by intrusion detection system

Abstract

Provided is hacking prevention technology, and more particularly, a method and apparatus for automatically analyzing log information of a web server for which intrusion is attempted from an outside source. In one embodiment, a method of analyzing a web server log using an intrusion detection scheme includes receiving log information of a web server from a manager; determining if there is a hacking attempt by analyzing the received log information of the web server based on a predetermined hacking attempt detection rule; and generating a checklist report based on the result of determination. Accordingly, it is possible to enable a manager to effectively cope with an external intrusion by automatically analyzing log information of a web server intruded from an outside source and reporting the same to the manager.

Dependencies are inferred from the claim text.