Big data security analysis platform system based on network security

Abstract

The invention relates to a big data security analysis platform system based on network security. The big data security analysis platform system comprises a unified collection platform, a basic data storage and processing capability center, an upper layer application data center and a big data list query center, the unified collection platform adopts Kafka as a message management layer of the unified collection platform to achieve flexible docking and adaption to various data source collection and to provide flexible and configurable data collection capability, the basic data storage and processing capability center utilizes the spark and hadoop technologies to provide powerful data processing capability, the upper layer application data center provides highly aggregated statistical data ofan enterprise through the RDBMS/ES, and the big data list query center provides fast query capability of big data by constructing an HBase cluster.

Description

technical field [0001] The invention relates to the field of information security, in particular to a big data security analysis platform system based on network security. Background technique [0002] With the advent of the Internet age, my country's network security issues have become increasingly prominent. The network security situation assessment technology can dynamically reflect the network security situation as a whole, predict and warn the development trend of the security situation, and provide a reliable reference basis for enhancing network security. [0003] At present, many scientific research institutions are conducting research and development of network situational awareness tools, and have made some progress. Wang Huiqiang from Harbin Engineering University combined various theories with situational awareness and proposed a variety of situational awareness models. Based on the network situational awareness model of simple weighting method and gray theory,...

AI Technical Summary

Problems solved by technology

[0005] The existing network security situational awareness system has the following deficiencies: 1) lack of data association, the existing network security situational awareness system tends to obtain multi-source data information, but lacks the analysis of the correlation between data information

2) The display form is single. At present, network security assessment generally uses qualitative or hierarchical methods to describe the security status of the network, lacking a more intuitive display form

Images