A hierarchical multi-domain visual security operation and maintenance method based on graph database

Abstract

The invention discloses a layered multi-domain visual security operation and maintenance method based on a graph database. Firstly, the security operation and maintenance is divided into a basic security layer, a security analysis layer and a threat intelligence layer, and at the same time, the functions of each layer are divided into single or multiple The basic security layer is divided into network topology domain, system service domain, personnel information domain and security policy domain, the security analysis layer is divided into dependency relationship domain, network security domain and user security domain, and the threat intelligence layer is composed of corresponding threat intelligence domains. Standard domain composition. Then, by transforming the structural relationship and attribute characteristics of each domain into corresponding UML diagrams, and deploying sensors with corresponding functions at designated network locations, the data required by each domain is collected. Then use the corresponding API to complete the mapping of UML graphs to graph databases, and finally realize visual security operation and maintenance by querying and analyzing graph database data. The invention combines graph database technology with security operation and maintenance, reduces the difficulty of security operation and maintenance, and improves the analysis efficiency of security operation and maintenance.

Description

technical field [0001] The invention relates to the technical field of security operation and maintenance, in particular to a hierarchical multi-domain visual security operation and maintenance method based on a graph database. Background technique [0002] With the continuous development of information technology, the application of computer and Internet technology has become the basic method for various organizations to realize resource storage, information sharing and business expansion. But at the same time, network security issues are becoming more and more prominent, network attacks are increasing year after year, attack methods are constantly changing, and attack threats are increasing year by year. The frequent occurrence of various security incidents has caused great economic losses to the organization. In this context, security The construction of operation and maintenance is very necessary. However, with the continuous expansion of the network scale, the gradual ...

AI Technical Summary

Problems solved by technology

[0005] The present invention aims to solve the deficiencies of traditional security operation and maintenance methods in data modeling, query, analysis and presentation in complex network environments, and provides a layered and multi-domain visual security operation and maintenance based on graph databases method

Images