Real-time monitoring platform based on government affair application security

Abstract

The invention relates to the technical field of government affair application security monitoring, and discloses a government affair application security-based real-time monitoring platform, which comprises a government affair big data center, a government affair application situation awareness analysis system, log acquisition equipment and flow auditing equipment, wherein the log acquisition equipment and the traffic auditing equipment acquire data from a government affair private network in a distributed manner and are connected to the government affair big data center; the government affairapplication situation awareness analysis system analyzes, models and learns a user of a government affair application based on data stored in a government affair big data center, thereby constructingnormal states of the user in different scenes and forming a baseline, and monitoring a current behavior of the user in real time. Suspicious behaviors existing in the user, the system and the equipment are discovered in time through the constructed rule model, the statistical model, the machine learning model and the unsupervised clustering analysis. According to the invention, the problems of lack of a real-time monitoring mechanism, incapability of timely analyzing threat elements and incapability of timely discovering abnormal behaviors in the current government affair application are solved.

Description

technical field [0001] The invention relates to the technical field of government application security monitoring, in particular to a real-time monitoring platform based on government application security. Background technique [0002] With the requirements of the government affairs management department for the level of informatization, a government big data platform that is unified, efficient, resource integrated, interconnected, information shared, transparent and easy to use is gradually being established. In the development process of government affairs management informatization, the security threats faced by business systems are also increasing. In this case, how to ensure information security is one of the key issues that must be solved in the construction of government affairs management informatization. With the increasingly widespread application of mobile government affairs and remote government affairs, how to ensure their application security has become an extr...

AI Technical Summary

Problems solved by technology

[0004] Aiming at the deficiencies of the existing technology, the present invention provides a real-time monitoring platform based on government application security to solve the technical problems that the current government application lacks a real-time monitoring mechanism, cannot analyze threat elements in time, and cannot detect abnormal behaviors in time