Intelligent analysis platform design method based on big data framework

Abstract

The invention relates to an intelligent analysis platform design method based on a big data framework, and relates to the technical field of network security. According to the intelligent analysis platform design method based on the big data framework, security big data is collected, security events are mined, security threats are perceived, early warning and prevention are carried out in advance by relying on a big data processing analysis architecture and combining an artificial intelligence enabled security analysis tool, and intelligent analysis of a network security situation is realized, and the intelligent safety protection level is improved. According to the intelligent analysis platform based on the big data framework, the big data framework is adopted in the technical system, security situation data such as network traffic, user behaviors, network boundaries, service systems and host endpoints are gathered, artificial intelligence technologies such as machine learning, deep learning, natural language processing and knowledge maps are adopted, fusion analysis and deep mining of situation data are realized, real-time perception of security threat events is realized, the network security situation is visually presented, and the continuous security guarantee capability in a network space is improved.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a method for designing an intelligent analysis platform based on a big data framework. Background technique [0002] With the emergence and development of new technologies such as big data, artificial intelligence, Internet of Things, cloud computing, and mobile Internet, the network is facing a more complex situation in the field of information security than ever before, and new security issues are constantly emerging. Events emerge one after another. There are not only endless intrusions and attacks from the outside, but also information security risks brought about by internal operational violations and improper management. [0003] With the widespread application of artificial intelligence technology in the past two years, network information systems are facing more intelligent, automated, and weaponized cyber attacks. The traditional security defense system has ser...

AI Technical Summary

Problems solved by technology

[0003] With the widespread application of artificial intelligence technology in the past two years, network information systems are facing more intelligent, automated, and weaponized cyber attacks. The traditional security defense system has serious risks and deficiencies, and it has been unable to solve the increasingly complex and hidden advanced Threats: ①Single-point and fragmented security protection methods, the information is fragmented, scattered, and lack of coordination; ②Feature-based threat detection cannot cope with advanced attack threats, and the technology is single and neglected to identify; ③Passive defense system cannot Early warning mechanism is provided, the system is missing, and the design is neglected; ④ Security noise is loud, value information is easily drowned out, staff is insufficient, and management is difficult

Images