Layered multi-domain visible security operation and maintenance method based on graph database

Abstract

The invention discloses a layered multi-domain visible security operation and maintenance method based on a graph database. The method comprises the steps of firstly dividing security operation and maintenance into a basic security layer, a security analysis layer and a threat information layer; meanwhile, dividing the function of each layer into a single or multiple domains, wherein the basic security layer is divided into a network topology domain, a system service domain, a personal information domain and a security strategy domain, the security analysis layer is divided into a dependence domain, a network security domain and a user security domain, and the threat information layer is composed of a corresponding threat information standard domain; then converting structural relation andattribute features of each domain to a corresponding UML graph, and meanwhile deploying sensors with corresponding functions at specified network positions for collecting data needed by each domain;then mapping the UML graph to the graph database via a corresponding API; and at last, achieving visible security operation and maintenance through querying and analyzing data of the graph database. According to the method provided by the invention, a graph database technology is combined with security operation and maintenance, so that difficulty of security operation and maintenance is reduced,and analysis efficiency of security operation and maintenance is improved.

Description

technical field [0001] The invention relates to the technical field of security operation and maintenance, in particular to a hierarchical multi-domain visual security operation and maintenance method based on a graph database. Background technique [0002] With the continuous development of information technology, the application of computer and Internet technology has become the basic method for various organizations to realize resource storage, information sharing and business expansion. But at the same time, network security issues are becoming more and more prominent, network attacks are increasing year after year, attack methods are constantly changing, and attack threats are increasing year by year. The frequent occurrence of various security incidents has caused great economic losses to the organization. In this context, security The construction of operation and maintenance is very necessary. However, with the continuous expansion of the network scale, the gradual ...

AI Technical Summary

Problems solved by technology

[0005] The present invention aims to solve the deficiencies of traditional security operation and maintenance methods in data modeling, query, analysis and presentation in complex network environments, and provides a layered and multi-domain visual security operation and maintenance based on graph databases method

Images