Big data security visualization interaction analysis system and method

Abstract

The present invention discloses a large data security visualization interactive analysis system and method. The system includes an advanced early warning center module, a time axis longitudinal correlation analyzer module, a related geographic information tracking display module, an original data drilling and navigation module, and a security gathering module. A horizontal association analyzer module, a data acquisition engine module, a data classification module, a data storage module, and a rule base processing module are found. The present invention splits and interprets the boring and professional result data presented in a single chart, synchronously further excavates the time elements, relationship elements, and geographical location information elements contained in it, and performs synchronous multi-dimensional presentation, enabling non-professional Management decision makers have intuitive and perceptual cognitive ability for safety.

Description

Technical field [0001] The present invention belongs to the technical field of data security, and relates to a big data security analysis system, in particular to a big data security visualized interactive analysis system; meanwhile, the present invention also relates to a big data security visualized interactive analysis method. Background technique [0002] The nature of network security tells us that it has long needed to integrate the idea of ​​big data. If you want to prevent the outbreak of the crisis, you cannot collect random samples, but all data. The health of the enterprise network needs more and broader data to evaluate . Today, when security threats are ubiquitous, this requires enterprises to have the first time insight into network changes, perceive problematic data, and provide effective security strategies, while also providing decision makers with the means to make business decisions quickly in accordance with. At present, each system of an enterprise generate...

AI Technical Summary

Problems solved by technology

At present, each system of an enterprise will generate tens of thousands of data. Although there are many traditional logs or other professional tools that can help enterprises analyze these data, traditional security product tools cannot bring us efficiency. IPS / IDS, firewall / UTM, AV, and log systems have tens of millions of pieces of information every day, but the processing of data by traditional product tools currently only stays in separate, independent, simple charts and simple lists In the way of query, these data have not been well presented as visual associations, and the extraction and association of key data must be screened one by one manually

[0003] And when security analysis and processing enter the era of big data, when faced with an average of tens of millions or even hundreds of millions of information per day (see Figure 7 ), if there is no human-computer interaction, especially visual interactive analysis, all data will become meaningless, and manual identification cannot be processed in time

Images