Situation awareness system based on information system network security

Abstract

The invention is suitable for the technical field of network security, and provides a situation awareness system based on information system network security. The system comprises a data acquisition unit, a data judgment and storage unit, a data processing unit, a situation prediction unit, a decision processing unit and a feedback unit, the data acquisition unit is used for acquiring security historical data of the network system; the data judgment and storage unit is in communication connection with the data acquisition unit and the data processing unit; the security processing unit is used for comparing the security historical data with an existing network state data set, judging whether the security historical data is the same as the existing network state data set or not, if yes, directly sending the same result to the decision processing unit, and directly performing security processing by the decision processing unit; if the data does not have the same data, the processing instruction is sent to the data processing unit, and the data processing unit executes the next operation; and the situation prediction unit is in communication connection with the data processing unit, and predicts the development trend of the network security state according to the security state and the historical information of the current network.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a situation awareness system based on information system network security. Background technique [0002] Situational awareness is an environment-based, dynamic, and holistic ability to understand security risks. It is based on security big data and is a way to improve the ability to discover, identify, understand, analyze, and respond to security threats from a global perspective. Ultimately, It is for decision-making and action, and for the implementation of security capabilities. With the importance of network security highlighted, situational awareness has begun to emerge in the field of network security. At this stage, facing the risk of failure of traditional security defense systems, situational awareness can fully perceive network security. Threat situation, insight into network and application operation health status, complete network attack source tracing and ev...

AI Technical Summary

Problems solved by technology

[0003] The existing network security situational awareness system needs to analyze all the data for each processing in the processing process. Due to the duplication of the previous processing in the data processing process, unnecessary time is spent on repeated processing. In order to To solve this technical problem, a situational awareness system based on information system network security is proposed to solve this technical problem

Images