Network security situation awareness system based on big data

Abstract

The invention provides a network security situation awareness system based on big data. The system comprises a data collection and transmission module used for acquiring network basic information froma network through a wireless sensor network; and a network security situation big data analysis module, including a data preprocessing unit used for preprocessing the received network basic information to obtain the network basic information in a normalized format; a network security situation assessment unit used for performing quantitative analysis on the threat, vulnerability and stability ofthe network by using the normalized network basic information to realize the analysis of the current network security situation; a network security situation prediction used for predicting the networksecurity situation according to historical information and the current state of the network security situation; and a network situation display unit used for visually displaying network security indexes according to the analysis and prediction results of the network security situation.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a network security situation awareness system based on big data. Background technique [0002] The existing network security situational awareness system has the following deficiencies: [0003] (1) Lack of verification of data validity: The data collected directly from the network may be generated by false positives from network security equipment, and the accuracy of the results obtained by processing such data is debatable; [0004] (2) Lack of data association: the existing network security situational awareness system tends to obtain multi-source data information, but lacks the analysis of the correlation between data information; [0005] (3) Lack of quantitative analysis: At present, network security assessments generally use qualitative or hierarchical methods to describe the security status of the network, lacking more accurate quantitative analysis consist...

AI Technical Summary

Problems solved by technology

[0003] (1) Lack of verification of data validity: The data collected directly from the network may be generated by false positives from network security equipment, and the accuracy of the results obtained by processing such data is debatable;

[0004] (2) Lack of data association: the existing network security situational awareness system tends to obtain multi-source data information, but lacks the analysis of the correlation between data information;

[0005] (3) Lack of quantitative analysis: At present, network security assessments generally use qualitative or hierarchical methods to describe the security status of the network, lacking more accurate quantitative analysis consistent with international standards

Images