Log management device, log management method, computer program product, and security attack detection and analyzing system
AssigneeDenso Corporation
InventorsTakeshi SUGASHIMA, Masumi EGAWA
Life of this patent
Estimating the term…
Abstract
A log management device includes a log collection unit configured to receive a log generated by a security sensor, a storage unit configured to store the log, a statistical analysis unit configured to obtain a statistical calculation result by performing statistical analysis on a plurality of the logs, a control unit configured to determine which of the log and the statistical calculation result is to be sent according to a predetermined condition, and a transmission unit configured to transmit at least one of the log or the statistical calculation result according to the predetermined condition.
Claims14
A log management device comprising:
- a log collection unit configured to receive a log generated by a security sensor;
- a storage unit configured to store the log;
- a statistical analysis unit configured to obtain a statistical calculation result by performing statistical analysis on a plurality of the logs;
- a control unit configured to determine which of the log and the statistical calculation result is to be sent according to a predetermined condition;
- and
- a transmission unit configured to transmit at least one of the log or the statistical calculation result according to the predetermined condition.
A log management method for a log management device comprising:
- receiving a log generated by a security sensor;
- storing the log;
- obtaining a statistical calculation result by performing statistical analysis on a plurality of the logs;
- determining which of the log and the statistical calculation result is to be sent according to a predetermined condition;
- and
- transmitting at least one of the log or the statistical calculation result according to the predetermined condition.
A computer program product stored on at least one non-transitory computer readable medium and comprising instructions configured to, when executed by at least one processor of a log management device, cause the at least one processor to:
- receive a log generated by a security sensor;
- store the log;
- obtain a statistical calculation result by performing statistical analysis on a plurality of the logs;
- determine which of the log and the statistical calculation result is to be sent according to a predetermined condition;
- and
- transmit at least one of the log or the statistical calculation result according to the predetermined condition.
A security attack detection and analyzing system comprising:
- a log management device;
- and
- a center device, wherein
- the log management device includes
- a log collection unit configured to receive a log generated by a security sensor,
- a storage unit configured to store the log,
- a statistical analysis unit configured to obtain a statistical calculation result by performing statistical analysis on a plurality of the logs,
- a control unit configured to determine which of the log and the statistical calculation result is to be sent according to a predetermined condition, and
- a transmission unit configured to transmit at least one of the log or the statistical calculation result according to the predetermined condition, and
- the center device includes
- a receiving unit configured to receive the at least one of the log or the statistical calculation result,
- an analysis unit configured to analyze the at least one of the log or the statistical calculation result, and generate an upload request for at least one of an additional log or an additional statistical calculation result based on a result of the analysis, and
- a transmission unit configured to transmit the upload request to the log management device.
Dependencies are inferred from the claim text.