Data analysis method and data analysis device

Abstract

The invention discloses a data analysis method and a data analysis device in the technical field of electronic information. The data analysis method comprises the steps of: S1: extracting system datain an electronic information network, and performing deep analysis on the extracted data; S2: pre-processing the data and inputting the data into an intrusion detection analysis engine; S3: detectinga known network intrusion by analyzing an intrusion detection behavior, uploading an intrusion detection result to a manager; S4: picking out all abnormal information, performing classified processingon the abnormal information and establishing intrusion detection rules; S5: establishing an intrusion detection rule set, importing the intrusion detection rule set into a database for storage, and matching the acquired data information with the intrusion detection rule set so as to determine an intrusion behavior. Through adoption of the data analysis method and the data analysis device of the invention, various network data sources are integrated, thus good expansibility is achieved, at the same time, characteristics of specific attack methods can be automatically concluded, thereby greatlyensuring safe and ordered operation of network activities.

Description

technical field [0001] The invention discloses a data analysis method and a data analysis device, specifically in the technical field of electronic information. Background technique [0002] With the advent of the information age, e-commerce, e-government, financial networks, and online virtual communities have entered thousands of households and gradually entered people's daily lives. Computer networks have become an indispensable part of modern social production and life. . However, the inherent openness of the electronic information network makes the network face a huge security risk from the very beginning, and the imperfection of network protocols, various software, and mistakes of network managers make this risk a real disaster. Network intrusion incidents It happens constantly, and even government websites are destroyed and military secrets are stolen from time to time. This requires a real-time network system intrusion detection data analysis device to protect the ...

AI Technical Summary

Problems solved by technology

However, the inherent openness of the electronic information network makes the network face a huge security risk from the very beginning, and the imperfection of network protocols, various software, and mistakes of network managers make this risk a real disaster. Network intrusion incidents It keeps happening, and even government websites are destroyed and military secrets are stolen from time to time

Images