Network safety situation perception result output method and device

Abstract

The embodiment of the invention provides a network safety situation perception result output method and device applied to a server; the method comprises the following steps: obtaining a network safety situation perception result; storing the network safety situation perception result according to preset rules; receiving a search request, and starting a container containing microservice executing the search request; outputting a search result obtained by the microservice from the network safety situation perception result, and closing the container. The network safety situation perception result output method and device can improve the server resource utilization rate.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a method and device for outputting network security situation awareness results. Background technique [0002] Network security situational awareness is the result of analyzing and predicting the current status of the entire network based on the acquisition of a large number of logs and network traffic data. It can perform security analysis in large-scale network data, support the collection, storage and analysis of network flow data, and network security analysts can use search requests to query from the results of network security situation awareness. [0003] In the prior art, the results of network security situational awareness are output based on virtual services. Virtual services run on virtual machines, because the startup time of virtual machines is relatively long, usually several minutes. When the user does not have a search request The virtual machine cannot...

AI Technical Summary

Problems solved by technology

[0003] In the prior art, the results of network security situational awareness are output based on virtual services. Virtual services run on virtual machines, because the startup time of virtual machines is relatively long, usually several minutes. When the user does not have a search request The virtual machine cannot be turned off at any time, otherwise, when the user sends a search request and then starts the virtual machine, the user will wait too long

When there is no user request, the virtual machine is always in an idle state, which will also occupy the resources of the server.

Therefore, the situational awareness output based on the virtual service will cause the resource utilization of the server to be low

Images