Method for generating big data security posture map based on trusted computing

Abstract

The invention provides a method for generating a big data security posture map based on trusted computing. The method for generating a trusted security posture map based on a geographical map, security data acquisition and the like, the credibility of information data acquisition of a trusted network is guaranteed, and alarm information is filtered and aggregated based on an algorithm for degree of nearness; events which cannot affect the security are removed from the normal alarm, so that the security hole is avoided while the disturbance to a monitor is reduced; the authenticity of trusted security behaviors of the posture map is higher; an overall map generation trusted environment from trusted data acquisition to merging and filtering to alarm generation and posture map generation is constructed, so that the trusted security, the integrity and the authenticity of the security posture map are guaranteed, the credibility of the posture map is guaranteed, and a trusted access and display mechanism is constructed on the basis of characteristics with a protection function, authentication and integrity measurement and the like.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a method for generating a big data security situation map based on trusted computing. Background technique [0002] With the expansion of network scale, the data volume of alarm information is increasing. How to effectively distinguish valid information and remove redundancy is also a difficulty in network security protection. In related technologies, there are too many human and subjective factors in the information security risk management system, and a scientific management method is lacking. There is an urgent need for a method that can understand the status and future trends of the entire network, be able to respond to threats and attacks on the network, re-adjust the configuration of network security resources and make security response strategies. [0003] Regarding the concept of trusted computing, the following definition is given in the ISO / IEC 15408 standard:...

AI Technical Summary

Problems solved by technology

According to the description of Chinese information security experts in the book "Software Behavior", behavioral security should include: behavioral confidentiality, behavioral integrity, and behavioral authenticity. In terms of situation maps, people are now doing more research How to ensure the confidentiality and integrity of the information, but it is difficult to effectively identify the authenticity of the behavior, such as some background time or harmless emergency security incidents, which brings inconvenience to operators. little trouble

Images