Tracking and Analyzing Web Penetration Attacks through Splunk-Driven Log Analysis

Abstract

With the popularity of Web applications, Web penetration attacks have become one of the most common types of cyber attacks. This study proposes a method for tracking and analyzing Web penetration attacks based on Splunk log analysis, aiming to identify and track potential network attack behaviors through in-depth analysis of network logs. First, we collected network log data from various sources and used Splunk as the main tool for data preprocessing and analysis. By deeply mining the log data, we were able to identify abnormal patterns and potential attack signs.