design and implement of firewall-log-based online attack detection system
This paper presents a firewall-log-based online attack detection system, giving its inner logic, composing, detecting method and realization. The system is up to firewall-log's online analysis, between-log relevancy checking, and automatic audit by the way of state transition of finite state machine. Test shows the system will provide firewall with not only network attack detection ability but also the ability to scan network addresses, scan communication ports and deny service.
firewall network security log analysis