Multi-level linkage analysis model distribution control and result synchronization method

Abstract

The invention provides a multi-level linkage analysis model distribution control and result synchronization method, and relates to the technical field of network security, and the method comprises the steps: S101, the superior-subordinate relationship of a multi-level linkage system is obtained; S102, the superior system issues an analysis model to the subordinate system; S103, the subordinate system receives the analysis model issued by the superior system; S104, the analysis model issued by the superior system is executed by the subordinate system; S105, the subordinate system reports an analysis result of the analysis model; and S106, the superior system obtains the reported analysis result. The multi-level linkage analysis model distribution control and result synchronization method solves the problem that a security event is missed or misreported due to the fact that a superior system cannot collect data from a subordinate system and analysis models between the superior system and the subordinate system are inconsistent in an existing network security big data analysis product.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a multi-level linkage analysis model distribution control and result synchronization method. Background technique [0002] For network security big data analysis products, due to the huge amount of logs involved, the upper-level system often cannot collect all the logs of the lower-level system, and the logs of the lower-level system are stored by the lower-level system itself. After the lower-level system self-stores, the upper-level system can only perform model analysis on its own logs, and cannot cover the scope of model analysis to the lower-level system, resulting in a large number of security events in the lower-level system that cannot be discovered. Contents of the invention [0003] In view of the shortcomings of the prior art described above, the purpose of the present invention is to provide a multi-level linkage analysis model distribution control and resu...

AI Technical Summary

Problems solved by technology

[0003] In view of the shortcomings of the prior art described above, the purpose of the present invention is to provide a multi-level linkage analysis model distribution control and result synchronization method, which is used to solve the inconsistency of the analysis models between the upper and lower systems in the prior art, which leads to security incidents False Negatives or False Negatives

Images