Network attack link visualization system, method and server

Abstract

A network attack link visualization system comprises a service acquisition module used for acquiring data used for drawing network topology from each regional server in a network in real time; a threat event acquisition module which is used for acquiring and summarizing threat events of each area of the network from the network security monitoring platform; and a visual service module which is used for aggregating the network topology data obtained from the service acquisition module and the threat event obtained from the threat event acquisition module, and drawing a network attack link and athreat event risk condition dynamic change graph.

Description

technical field [0001] The invention relates to the field of network security data visualization, dynamically draws network attack links based on enterprise network topology and threat event risks, and clearly displays the attack links and the degree of harm. Background technique [0002] With the advent of the era of big data, more and more attention has been paid to network information security, but the possibility of network attacks and information leakage is still unavoidable. Security vendors have proposed a solution to visualize the supply link for the attack link of a network attack. The traditional supply chain visualization mainly depicts the attack route in the form of a static picture based on the enterprise network topology and displays the effect of the breathing light to prompt the enterprise customer server to be attacked, but this traditional mode also brings some restrictions to the enterprise. It does not dynamically display the attack links in the enterpr...

AI Technical Summary

Problems solved by technology

The traditional supply chain visualization mainly depicts the attack route in the form of a static picture based on the enterprise network topology and displays the effect of the breathing light to prompt the enterprise customer server to be attacked, but this traditional mode also brings some restrictions to the enterprise. It does not dynamically display the attack link and the risk of being attacked in the topological area of ​​the enterprise, which brings certain challenges to the analysis and judgment of the enterprise and the product empowerment of security vendors

Images