Network security situation awareness system platform based on data flow processing

Abstract

The invention discloses a network security situation awareness system platform based on data flow processing. The network security situation awareness system platform comprises a data acquisition module, a processing module, a recording module and a network situation visualization module, the processing module is used for classifying the data acquired by the data acquisition module, processing theacquired and counted data information P in the later period and autonomously judging whether the data information P is an intruder or not without autonomously defending the intruder; and the recording module is used for counting the operation data of the processing module, so that an operator can repair and process the operation data conveniently in the later period, and meanwhile, the operationdata is stored in a database to facilitate autonomous processing in the later period. The data acquisition module of the network security situation awareness system platform based on data flow processing is divided into portal data acquisition and gateway data acquisition, and the data acquisition module enables the data acquisition amount to be large, so that the data can be better acquired, later detection and analysis of a database are facilitated, and the correctness of network situation analysis is expanded.

Description

technical field [0001] The invention relates to the technical field of network security situational awareness, in particular to a network security situational awareness system platform based on data flow processing. Background technique [0002] With the rapid development of computer networks, weak links in the network itself, various network attack methods emerge in endlessly, and a wide variety of automated attack tools emerge. At present, various network intrusions are showing an upward trend, network security incidents occur frequently, and network security situation awareness technology Faced with the large-scale network environment, it undertakes important tasks, and it raises the monitoring of network security to a higher level. As a popular direction in the information age, network security situational awareness is speeding up disaster response, improving resistance capabilities, and reducing damage losses, etc. Place plays a key role. [0003] However, in the proce...

AI Technical Summary

Problems solved by technology

[0005] The purpose of the present invention is to provide a network security situational awareness system platform based on data flow processing to solve the problem that the existing network situational security awareness system platform cannot be well organized and statistically based on data and processed technically. question

Images