A multi-source heterogeneous security data acquisition system based on a semantic Agent

Abstract

The invention discloses a multi-source heterogeneous security data acquisition system based on a semantic Agent. The system comprises a data acquisition layer, a management layer and a fusion storagelayer, wherein the data acquisition layer is composed of various data acquisition agents and is responsible for real-timely acquiring the data, analyzing the data and processing and providing the result data for the management layer; the management layer is composed of management Agents and is responsible for packaging the received data and gathering the data to the fusion storage layer; the fusion storage layer is composed of a security information database and a semantic fusion Agent and is responsible for data fusion processing. According to the scheme provided by the invention, the problemthat multi-source heterogeneous network security state data cannot be acquired and fused is effectively solved, and the comprehensive monitoring of a large-scale network and the timely mastering of the network security conditions are realized.

Description

technical field [0001] The invention belongs to the technical field of big data collection, and relates to a semantic agent-based multi-source heterogeneous security data collection system. Background technique [0002] With the continuous development of network technology and the rapid popularization of the network, the network is currently developing towards a large-scale and highly distributed direction; at the same time, intrusion attacks are also moving towards large-scale, distributed, complex and diversified , intelligence and other directions of development and evolution, the increasingly severe security threats force all functional departments to strengthen the security protection of the network system. [0003] With the establishment of a defense-in-depth system based on a large number of heterogeneous security defense technologies such as network intrusion detection, network firewall, anti-virus system, and terminal monitoring system, several isolated single-point...

AI Technical Summary

Problems solved by technology

[0005] The purpose of the present invention is to provide a multi-source heterogeneous security data acquisition system based on Semantic Agent, aiming at the multi-source heterogeneous characteristics of network security data, the Semantic Web technology is introduced into the Agent-based data acquisition model, and all kinds of security sensors The generated multi-source heterogeneous data is collected in real time, and is uniformly expressed as standardized data with semantics, which eliminates the differences in semantic understanding, effectively solves the problem that it is impossible to collect and process multi-source heterogeneous network security status data, and realizes Comprehensive monitoring of large-scale networks and timely grasp of network security status

Images