Big data intelligent analysis and application method based on network security

Abstract

The invention provides a big data intelligent analysis application method based on network security, and the method comprises the following steps: acquiring and preprocessing network data, storing the network data and forming a distributed storage management system; establishing a mathematical model library according to the network data, and completing data structure definition; providing a data mining analysis entry, establishing a corresponding model according to the algorithm parameters, and generating an analysis result. According to the invention, on the basis of security big data, the network security situation can be sensed in all weather and all directions; an existing real-time monitoring technology is utilized, and abnormal behaviors are found through long-time data analysis; through data modeling, a visual analysis capability is established, an influence range, an attack path, a purpose and a means of a threat are rapidly researched and judged, and an effective security decision and response are made; a risk notification and threat early warning mechanism is established, information such as objectives, techniques and tactics, attack tools and the like of attackers is comprehensively mastered, and a defense system is perfected.

Description

technical field

[0001] The invention relates to the technical field of network security, in particular to a network security-based big data intelligent analysis application method. Background technique

[0002] At present, network security technology usually uses big data analysis and detection of known network threats and attack behaviors, that is, through the analysis of network traffic, threat data and behavior technologies, to detect all persistent threats of suspicious network activities for protection.

[0003] However, although the above-mentioned technology can achieve simultaneous network detection and file detection, it lacks the capabilities of data collection, analysis and prediction, research and early warning, and solutions for unknown threats. Contents of the invention

[0004] The purpose of the present invention is to provide a network security-based big data intelligent analysis application method, which can effectively monitor various network threats. ...

Images