Big data security analysis system based on massive network monitoring data

Abstract

The invention discloses a big data security analysis system based on massive network monitoring data. The system includes a data traffic monitoring module, a deep packet detection module, a data jointanalysis module, an anomaly detection module and a security evaluation module, wherein the data traffic monitoring module is used to monitor data traffic in real time, analyze applications, perform lossless collection on various system traffic data, and transmit the data to other modules; the deep packet detection module is used to judge the service types and application types by deeply reconstituting and analyzing the payload content of a seventh-layer packet and matching service characteristics, and performs analysis to obtain different application types; the data joint analysis module is used to perform data aggregation and study the state and association analysis to further remove redundant information in original data; the anomaly detection module is used to detect a data analysis result and judge whether the data is abnormal; and the security evaluation module is used to obtain a data evaluation result by combining the network situation based on the analysis and detection of other modules. According to the system, the real-time monitoring of network data and corresponding data security analysis can be implemented, and the data security and reliability can be improved.

Description

technical field [0001] The invention relates to the technical field of data analysis, in particular to a big data security analysis system based on massive network monitoring data. Background technique [0002] With the in-depth development of IT in all walks of life and the complexity of IT technology itself, IT technology tends to be hierarchical in structure and widely used in distributed deployment. The traditional single network operation and maintenance method is increasingly unable to meet the changes. Advanced IT technologies and new attack methods emerge in an endless stream. Technologies such as virtualized cloud computing have also changed the way IT is deployed under the original structure. The widespread use of smart grids has led to a sharp increase in the amount of digital information in the grid. A new visual operation and maintenance method is required to solve new IT operation and maintenance challenges, to ensure the production safety of the power network...

AI Technical Summary

Problems solved by technology

[0004] Most of the traditional analysis methods use rule-based and feature-based analysis engines, which must have a rule base and a feature base to work. Rules and features can only describe known attacks and threats, and cannot identify unknown attacks, or are not yet known. Attacks and threats described as rules

Images