Network security situation analysis and early warning system based on big data and wsn technology

Abstract

The invention provides a network security situation analysis early-warning system based on big data and a WSN technology. The network security situation analysis early-warning system comprises a wireless sensor network sub-system and a big data analysis early-warning sub-system; the wireless sensor network sub-system is used for obtaining network basic information from a network through a wirelesssensor network and transmitting the network basic information to the big data analysis early-warning sub-system; the network basic information includes alarm information generated by the network, network vulnerability information and network flow information used for describing the network stability; the big data analysis early-warning sub-system comprises a pre-processing unit, a network security situation evaluation unit and a network situation early-warning unit; the pre-processing unit is used for pre-processing the network basic information, so that the network basic information in the normalized format is obtained; the network security situation evaluation unit is used for performing quantitative analysis on the threat, the vulnerability and the stability of the network by utilizingthe normalized network basic information, and outputting the current network security situation value; and the network situation early-warning unit is used for outputting an alarm signal when the current network security situation value is beyond a set threshold value range.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a network security situation analysis and early warning system based on big data and WSN technology. Background technique [0002] The existing network security situational awareness system has the following deficiencies: [0003] (1) Lack of verification of data validity: The data collected directly from the network may be generated by false positives from network security equipment, and the accuracy of the results obtained by processing such data is debatable; [0004] (2) Lack of data association: the existing network security situational awareness system tends to obtain multi-source data information, but lacks the analysis of the correlation between data information; [0005] (3) Lack of quantitative analysis: At present, network security assessments generally use qualitative or hierarchical methods to describe the security status of the network, lacking more ac...

AI Technical Summary

Problems solved by technology

[0003] (1) Lack of verification of data validity: The data collected directly from the network may be generated by false positives from network security equipment, and the accuracy of the results obtained by processing such data is debatable;

[0004] (2) Lack of data association: the existing network security situational awareness system tends to obtain multi-source data information, but lacks the analysis of the correlation between data information;

[0005] (3) Lack of quantitative analysis: At present, network security assessments generally use qualitative or hierarchical methods to describe the security status of the network, lacking more accurate quantitative analysis consistent with international standards

Images