Network security information management system based on big data

Abstract

The invention discloses a network security information management system based on big data, which relates to the technical field of security management and comprises an information transmission module, a data standardization module, a sending module, an information receiving module, an information monitoring module, a data matching module and a data bureau evidence storage module. According to the security information management system based on the big data network, the resultant Poisson's ratio and the resultant Young modulus in the information transmission process are monitored in real time, and when data change occurs, the resultant Poisson's ratio and the resultant Young modulus change at the same time, so that the change condition of information in the information transmission process can be accurately monitored; meanwhile, whether data insertion occurs or not can be detected by detecting the Poisson's ratio and the Young's modulus of adjacent information in the transmission process, the inserted data are marked as dangerous data, and whether information variation occurs or not in the transportation process can be monitored in real time by detecting the Poisson's ratio and the Young's modulus of single-segment information.

Description

Technical Field

[0001] The present invention relates to the field of security management technology, and in particular to a network security information management system based on big data. Background Art

[0002] Network security means that the hardware, software and data of the network system are protected from damage, change or leakage due to accidental or malicious reasons, and the system runs continuously, reliably and normally without interruption of network services.

[0003] Computer network is an important means and channel for people to understand society and obtain information through modern information technology. Network security management is the fundamental guarantee for people to surf the Internet safely, greenly and healthily.

[0004] With the development of information networks, the attack and counter-attack technology for computer systems and networks and information network security protection technology have become hot technologies in the current information technology field, and information security technology has become a booming emerging technology field. Illegal theft and interference mostly come from various intrusion activities. In recent years, the frequent occurrence of network attacks on the Internet has made network security protection issues a top priority in network information security management.

[0005] When performing security management on the network used, the existing technology focuses more on using known network vulnerabilities to detect and intercept network viruses, and the detection of unknown network vulnerabilities is often stored only when network security anomalies occur, and it is not possible to intercept unknown network vulnerabilities in the early stage of network security anomalies. At the same time, the current network security information management processes a large number of files at the same time, which will result in different security vulnerability detection methods for different file security levels, which will lead to accuracy problems when performing security vulnerability detection. Summary of the invention

[0006] The purpose of the present invention is to provide a network security information management system based on big data to solve the above-mentioned deficiencies in the prior art.

[0007] In order to achieve the above-mentioned purpose, the present invention provides the following technical solutions: a network security information management system based on big data, including an information transmission module, a data standardization module, a sending module, an information receiving module, an information monitoring module, a data matching module, and a data bureau evidence storage module:

[0008] The information transmission module is used to generate a data transmission path;

[0009] The information sending module is used to send information through the data transmission path generated by the information transmission module;

[0010] The data standardization module is used to receive the information sent by the information sending module and convert the information into information data in a standard data format;

[0011] The information monitoring module is used to monitor the data in the data transmission process in real time based on the information monitoring model, and classify the data into safe data and dangerous data according to the monitoring results;

[0012] The data matching module is used to receive the information data whose monitoring results are safety data in the information monitoring module, and match it with the information sent by the information sending module through the matching model.

[0013] The information receiving module is used to receive information about successful matching from the data matching module;

[0014] The data evidence storage module is used to receive information data whose monitoring results are dangerous data in the information monitoring module, and to store the data evidence.

[0015] Furthermore, the specific working method of the data standardization module is:

[0016] A1, firstly, back up the network security data sent by the information sending module using the recovery manager of the relational database;

[0017] A2, extract, verify and clean the data from the backup database;

[0018] A3, for the unstructured data obtained in step A2, use natural language processing to convert the unstructured data into structured data;

[0019] A4, the processed data is mapped according to the general data model rules and table structure and converted into a general data model.

[0020] Furthermore, the specific working method of the data matching module is:

[0021] C1, reads the receiving end network security data hash value group;

[0022] C2, restores the sender's network security data hash value group according to the promiscuous scheme;

[0023] C3, calculate the similarity (Pi, Ci) of each item in the receiving end network security data hash value group [P1, P2, ..., Pi] and the sending end network security data hash value group [C1, C2, ..., Ci]:

[0024] i. For information that can fully identify network security data processed using SHA256, directly compare the hash values, and take a value of 1 or 0 based on whether they are the same or not;

[0025] ii. Calculate the similarity of the information processed by text deduplication and sort it. Sorting is done according to the calculation results, and weight calculation is performed on the top two network security data in the comparison results;

[0026] C4, weight calculation is performed according to the matched data composition:

[0027] For the data results screened out by similarity calculation, the sum of weights is calculated according to the pre-established weight proportion scheme, Sum = ∑w*Similarity(Pi, Ci);

[0028] C5, sum the weights and compare them with the threshold to determine whether they are the same network security data.

[0029] Furthermore, the information monitoring module includes

[0030] A data monitoring module, the data monitoring module is used to receive the data encrypted by the information encryption module;

[0031] A channel monitoring module, the channel monitoring module is used to detect channel information on the information transmission path;

[0032] A data flow monitoring module, wherein the data flow monitoring module is used to monitor the information flow transmitted in the channel;

[0033] A data simulation module, wherein the data simulation module is used to obtain the transmission status of data in the channel based on a data simulation model by taking the channel information obtained by the channel monitoring module and the information flow obtained by the data flow monitoring module as inputs of the data simulation model;

[0034] The data judgment module is used to judge whether the data transmission situation in the channel has changed during the current period through a data judgment model.

[0035] Furthermore, the information monitoring module includes the following working steps:

[0036] B1, receiving the data encrypted by the information encryption module;

[0037] B2. Detecting channel information on the information transmission path through a channel detection module;

[0038] B3, monitoring the information flow transmitted in the channel through the data flow monitoring module;

[0039] B4, based on the data simulation model, the channel information obtained in step S2 and the information flow obtained in step S3 are used as inputs of the data simulation model to obtain the transmission status of the data in the channel;

[0040] B5. Determine whether the data transmission situation in the channel has changed during the current period through the data judgment model. If the judgment result is yes, the information detection result is that the information is in a safe state. If the judgment result is no, the information detection result is that the information is in a dangerous state.

[0041] B6. Send the information that is judged to be in a safe state in step B5 to the information decryption module, and send the information that is judged to be in a dangerous state in step B6 to the data evidence storage module.

[0042] Furthermore, in step B4, based on the data simulation model, obtaining the transmission status of data in the channel specifically includes the following working steps:

[0043] E1, calculates the stress of transmitting information in a channel for a single segment of information;

[0044] E2, calculates the strain of transmitting information in the channel for a single segment of information;

[0045] E3, calculate the Young's modulus of the end of a single segment of information in the channel;

[0046] E4, calculate the Poisson's ratio of the end of the single-segment information in the channel;

[0047] E5, calculate the Young's modulus of the resultant force of multi-terminal information;

[0048] E6, calculate the Poisson's ratio of the resultant force of multi-terminal information.

[0049] Furthermore, the specific working method of the data evidence storage module is:

[0050] D1, first is the network security data entry stage, the queried end submits a network security data entry request, fills in the corresponding network security data transmission information according to the requirements of the network security data entry window returned by the network security data authentication module, and submits the network security data transmission information after filling in;

[0051] D2, the network security data authentication module performs field inspection and format verification operations after receiving the network security data transmission information. After completion, it searches through the students in the network security data to see if there is repeated network security data transmission information. If not, the network security data is stored in the database and then returned to the queried end to indicate that the network security data entry is successful, ending the network security data entry stage;

[0052] D3, the second is the network security data authentication stage, where the query end submits a network security data viewing request to the evidence storage network security data management module. After receiving the request, the evidence storage network security data management module finds the network security data under the corresponding department through the department information of the query end and the provided multi-dimensional search criteria, and performs cache operations;

[0053] D4, the query end selects the network security data transmission information to be authenticated, checks it, verifies its authenticity, fills in the authentication evaluation, and submits the authentication result to the network security data authentication module;

[0054] D5, the network security data authentication module updates the evaluation information and authentication status to the corresponding network security data and then stores the network security data on the blockchain. At the same time, the shared model on the chain is called to process the network security data to obtain the network security data label and store it;

[0055] D6, the next stage is the network security data query phase, where the queried end submits a network security data query request to the network security data query module;

[0056] D7, the queried end modifies the network security data transmission information, writes a corresponding query request and submits the query information to the network security data query module;

[0057] D8, the last is the network security data query processing stage. The query end submits a query processing request to the network security data query module. The network security data query module queries the current query request from the database according to the department where the query end is located, and searches the corresponding network security data list through the list in the query information. As in the network security data query stage, it needs to judge the network security data authentication status for reading;

[0058] D9, the query end selects the query information to be processed, writes the processing information after review, and submits the query processing completion request to the network security data query module after completion.

[0059] Compared with the prior art, the present invention provides a network security information management system based on big data, which can accurately monitor the changes of information in the process of information transmission by real-time monitoring the resultant Poisson's ratio and the resultant Young's modulus in the process of information transmission. When the data changes, the resultant Poisson's ratio and the resultant Young's modulus change at the same time. At the same time, by detecting the Poisson's ratio and Young's modulus of adjacent information in the transmission process, it can be detected whether data insertion occurs, and the inserted data can be marked as dangerous data. At the same time, by detecting the Poisson's ratio and Young's modulus of single-segment information, it can be monitored in real time whether information mutation occurs during the transportation process. BRIEF DESCRIPTION OF THE DRAWINGS

[0060] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in the present invention. For ordinary technicians in this field, other drawings can also be obtained based on these drawings.

[0061] Figure 1 A system structure block diagram provided for an embodiment of the present invention. DETAILED DESCRIPTION

[0062] In order to enable those skilled in the art to better understand the technical solution of the present invention, the present invention will be further described in detail below with reference to the accompanying drawings.

[0063] In the description of the present invention, it should be understood that the terms "center", "longitudinal", "lateral", "length", "width", "thickness", "up", "down", "front", "back", "left", "right", "vertical", "horizontal", "top", "bottom", "inside", "outside", "clockwise", "counterclockwise" and the like indicate orientations or positional relationships based on the orientations or positional relationships shown in the accompanying drawings, and are only for the convenience of describing the present invention and simplifying the description, and do not indicate or imply that the referred device or element must have a specific orientation, be constructed and operated in a specific orientation, and therefore should not be understood as limiting the present invention.

[0064] In addition, the terms "first" and "second" are only used for descriptive purposes and cannot be understood as indicating or implying relative importance or implicitly indicating the number of technical features indicated. Therefore, the features defined as "first" and "second" may explicitly or implicitly include one or more of the features. In the description of the present invention, "multiple" means two or more, unless otherwise clearly and specifically defined. In addition, the terms "installed", "connected" and "connected" should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection, or it can be indirectly connected through an intermediate medium, or it can be the internal connection of two components. For those of ordinary skill in the art, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0065] Example embodiments will be described more fully below with reference to the accompanying drawings, but the example embodiments may be embodied in different forms and should not be construed as limited to the embodiments set forth herein. On the contrary, the purpose of providing these embodiments is to make the present disclosure thorough and complete and to enable those skilled in the art to fully understand the scope of the present disclosure.

[0066] In the absence of conflict, the various embodiments of the present disclosure and the various features therein may be combined with each other.

[0067] As used herein, the term "and / or" includes any and all combinations of one or more of the associated listed items.

[0068] The terms used herein are only used to describe specific embodiments and are not intended to limit the present disclosure. As used herein, the singular forms "a", "an" and "the" are also intended to include the plural forms, unless the context clearly indicates otherwise. It will also be understood that when the terms "comprising" and / or "made of" are used in this specification, the presence of the features, wholes, steps, operations, elements and / or components is specified, but the presence or addition of one or more other features, wholes, steps, operations, elements, components and / or groups thereof is not excluded.

[0069] The embodiments described herein may be described with reference to plan views and / or cross-sectional views by means of idealized schematic diagrams of the present disclosure. Therefore, the example illustrations may be modified according to manufacturing techniques and / or tolerances. Therefore, the embodiments are not limited to the embodiments shown in the accompanying drawings, but include modifications of the configurations formed based on the manufacturing process. Therefore, the regions illustrated in the accompanying drawings have schematic properties, and the shapes of the regions shown in the figures illustrate the specific shapes of the regions of the elements, but are not intended to be limiting.

[0070] Unless otherwise defined, all terms (including technical and scientific terms) used herein have the same meaning as commonly understood by those of ordinary skill in the art. It will also be understood that terms such as those defined in commonly used dictionaries should be interpreted as having a meaning consistent with their meaning in the context of the relevant art and the present disclosure, and will not be interpreted as having an idealized or overly formal meaning unless explicitly defined as such herein.

[0071] See also Figure 1 , a network security information management system based on big data, including information transmission module, data standardization module, sending module, information receiving module, information monitoring module, data matching module, and data bureau evidence storage module:

[0072] The information transmission module is used to generate a data transmission path;

[0073] The information sending module is used to send information through the data transmission path generated by the information transmission module;

[0074] The data standardization module is used to receive the information sent by the information sending module and convert the information into information data in a standard data format;

[0075] The information monitoring module is used to monitor the data in the data transmission process in real time based on the information monitoring model, and classify the data into safe data and dangerous data according to the monitoring results;

[0076] The data matching module is used to receive the information data whose monitoring results are safety data in the information monitoring module, and match it with the information sent by the information sending module through the matching model.

[0077] The information receiving module is used to receive information about successful matching from the data matching module;

[0078] The data evidence storage module is used to receive information data whose monitoring results are dangerous data in the information monitoring module, and to store the data evidence.

[0079] The specific working method of the data standardization module is:

[0080] A1, firstly, back up the network security data sent by the information sending module using the recovery manager of the relational database;

[0081] A2, extract, verify and clean the data from the backup database;

[0082] A3, for the unstructured data obtained in step A2, use natural language processing to convert the unstructured data into structured data;

[0083] A4, the processed data is mapped according to the general data model rules and table structure and converted into a general data model.

[0084] The specific working method of the data matching module is:

[0085] C1, reads the receiving end network security data hash value group;

[0086] C2, restores the sender's network security data hash value group according to the promiscuous scheme;

[0087] C3, calculate the similarity (Pi, Ci) of each item in the receiving end network security data hash value group [P1, P2, ..., Pi] and the sending end network security data hash value group [C1, C2, ..., Ci]:

[0088] i. For information that can fully identify network security data processed using SHA256, directly compare the hash values, and take a value of 1 or 0 based on whether they are the same or not;

[0089] ii. Calculate the similarity of the information processed by text deduplication and sort it. Sorting is done according to the calculation results, and weight calculation is performed on the top two network security data in the comparison results;

[0090] C4, weight calculation is performed according to the matched data composition:

[0091] For the data results screened out by similarity calculation, the sum of weights is calculated according to the pre-established weight proportion scheme, Sum = ∑w*Similarity(Pi, Ci);

[0092] C5, sum the weights and compare them with the threshold to determine whether they are the same network security data.

[0093] Information monitoring module includes

[0094] A data monitoring module, which is used to receive the data encrypted by the information encryption module;

[0095] A channel monitoring module, which is used to detect channel information on the information transmission path;

[0096] A data flow monitoring module, which is used to monitor the information flow transmitted in the channel;

[0097] The data simulation module is used to obtain the transmission status of data in the channel based on the data simulation model by taking the channel information obtained by the channel monitoring module and the information flow obtained by the data flow monitoring module as the input of the data simulation model;

[0098] The data judgment module is used to judge whether the data transmission situation in the channel has changed during the current period through the data judgment model.

[0099] The information monitoring module includes the following working steps:

[0100] B1, receiving the data encrypted by the information encryption module;

[0101] B2. Detecting channel information on the information transmission path through a channel detection module;

[0102] B3, monitoring the information flow transmitted in the channel through the data flow monitoring module;

[0103] B4, based on the data simulation model, the channel information obtained in step S2 and the information flow obtained in step S3 are used as inputs of the data simulation model to obtain the transmission status of the data in the channel;

[0104] B5. Determine whether the data transmission situation in the channel has changed during the current period through the data judgment model. If the judgment result is yes, the information detection result is that the information is in a safe state. If the judgment result is no, the information detection result is that the information is in a dangerous state.

[0105] B6. Send the information that is judged to be in a safe state in step B5 to the information decryption module, and send the information that is judged to be in a dangerous state in step B6 to the data evidence storage module.

[0106] In step B4, based on the data simulation model, the transmission status of the data in the channel is obtained, which specifically includes the following working steps:

[0107] E1, calculate the stress σ of a single-segment information transmission in the channel, where the calculation formula is:

[0108]

[0109] Where F represents the force exerted on the information during the channel transportation process, P represents the information transmission impulse, t represents the time for information transmission in the channel, m represents the amount of data information, v represents the information flow rate of information transmission in the channel, and S represents the force area of ​​information during the channel transportation process;

[0110] E2, calculate the strain ε of a single segment of information transmitted in the channel, the strain ε includes the strain ε in the horizontal direction x and the vertical strain ε y , where the calculation formula is:

[0111]

[0112] Where L x Represents the horizontal information length of the information transported in the channel, ΔL x Indicates the change in the horizontal length of the information transported in the channel, L y Indicates the vertical length of the information transported in the channel, ΔL y Indicates the change in the vertical information length of the information transported in the channel;

[0113] E3, calculate the Young's modulus E of the end of the single-segment information in the channel, the Young's modulus E includes the Young's modulus E in the horizontal direction x And the Young's modulus E in the vertical plane direction y , where the calculation formula is:

[0114]

[0115] where σ x represents the stress in the horizontal direction, σ y represents the stress in the horizontal direction;

[0116] E4, calculate the Poisson's ratio ν at the end of the single-segment information in the channel, where the calculation formula is:

[0117]

[0118] E5, calculate the Young's modulus E of the combined force of multi-terminal information h , where the calculation formula is:

[0119]

[0120] Where E xn represents the Young's modulus of the end of the nth information segment in the channel, E yn represents the Young's modulus of the end of the nth information segment in the channel;

[0121] E6, calculate the Poisson's ratio ν of the combined force of multi-terminal information h , where the calculation formula is:

[0122]

[0123] where ν n Represents the Poisson's ratio of the end of the nth message segment in the channel.

[0124] This setting can monitor the resultant Poisson's ratio and the resultant Young's modulus in real time during information transmission. When the data changes, the resultant Poisson's ratio and the resultant Young's modulus change at the same time, so the changes of information during information transmission can be accurately monitored. At the same time, by detecting the Poisson's ratio and Young's modulus of adjacent information during transmission, it can be detected whether data insertion occurs, and the inserted data can be marked as dangerous data. At the same time, by detecting the Poisson's ratio and Young's modulus of a single segment of information, it can be monitored in real time whether information mutation occurs during transportation.

[0125] The specific working method of the data storage module is as follows:

[0126] D1, first is the network security data entry stage, the queried end submits a network security data entry request, fills in the corresponding network security data transmission information according to the requirements of the network security data entry window returned by the network security data authentication module, and submits the network security data transmission information after filling in;

[0127] D2, the network security data authentication module performs field inspection and format verification operations after receiving the network security data transmission information. After completion, it searches through the students in the network security data to see if there is duplicate network security data transmission information. If not, the network security data is stored in the database and then returned to the queried end to indicate that the network security data has been successfully entered, ending the network security data entry stage;

[0128] D3, the second is the network security data authentication stage, where the query end submits a network security data viewing request to the evidence storage network security data management module. After receiving the request, the evidence storage network security data management module finds the network security data under the corresponding department through the department information of the query end and the provided multi-dimensional search criteria, and performs cache operations;

[0129] D4, the query end selects the network security data transmission information to be authenticated, checks it, verifies its authenticity, fills in the authentication evaluation, and submits the authentication result to the network security data authentication module;

[0130] D5, the network security data authentication module updates the evaluation information and authentication status to the corresponding network security data and then stores the network security data on the blockchain. At the same time, the shared model on the chain is called to process the network security data to obtain the network security data label and store it;

[0131] D6, the next stage is the network security data query phase, where the queried end submits a network security data query request to the network security data query module;

[0132] D7, the queried end modifies the network security data transmission information, writes a corresponding query request and submits the query information to the network security data query module;

[0133] D8, the last is the network security data query processing stage. The query end submits a query processing request to the network security data query module. The network security data query module queries the current query request from the database according to the department where the query end is located, and searches the corresponding network security data list through the list in the query information. As in the network security data query stage, it needs to judge the network security data authentication status for reading;

[0134] D9, the query end selects the query information to be processed, writes the processing information after review, and submits the query processing completion request to the network security data query module after completion.

[0135] The above description is only by way of illustration of certain exemplary embodiments of the present invention. It is undoubted that those skilled in the art can modify the described embodiments in various ways without departing from the spirit and scope of the present invention. Therefore, the above drawings and descriptions are illustrative in nature and should not be construed as limiting the scope of protection of the claims of the present invention.

Claims

1. A network security information management system based on big data, Features: It includes information transmission module, data standardization module, sending module, information receiving module, information monitoring module, data matching module and data bureau evidence storage module: The information transmission module is used to generate a data transmission path; The information sending module is used to send information through the data transmission path generated by the information transmission module; The data standardization module is used to receive the information sent by the information sending module and convert the information into information data in a standard data format; The information monitoring module is used to monitor the data in the data transmission process in real time based on the information monitoring model, and classify the data into safe data and dangerous data according to the monitoring results; The data matching module is used to receive information data whose monitoring results are safety data in the information monitoring module, and match it with the information sent by the information sending module through a matching model; The information receiving module is used to receive information about successful matching from the data matching module; The data evidence storage module is used to receive information data whose monitoring results are dangerous data in the information monitoring module, and to store the data evidence.

2. According to the big data network security information management system described in claim 1, Features: The specific working method of the data standardization module is: A1, firstly, back up the network security data sent by the information sending module using the recovery manager of the relational database; A2, extract, verify and clean the data from the backup database; A3, for the unstructured data obtained in step A2, use natural language processing to convert the unstructured data into structured data; A4, the processed data is mapped according to the general data model rules and table structure and converted into a general data model.

3. According to the big data network security information management system described in claim 1, Features: The specific working method of the data matching module is: C1, reads the receiving end network security data hash value group; C2, restores the sender's network security data hash value group according to the promiscuous scheme; C3, calculate the similarity (Pi, Ci) of each item in the receiving end network security data hash value group [P1, P2, ..., Pi] and the sending end network security data hash value group [C1, C2, ..., Ci]: i. For information that can fully identify network security data processed using SHA256, directly compare the hash values, and take a value of 1 or 0 based on whether they are the same or not; ii. Calculate the similarity of the information processed by text deduplication and sort it. Sorting is done according to the calculation results, and weight calculation is performed on the top two network security data in the comparison results; C4, weight calculation is performed according to the matched data composition: For the data results screened out by similarity calculation, the sum of weights is calculated according to the pre-determined weight ratio w scheme, Sum = ∑w*Similarity(Pi, Ci); C5, sum the weights and compare them with the threshold to determine whether they are the same network security data.

4. According to the big data network security information management system described in claim 1, Features: The information monitoring module includes A data monitoring module, the data monitoring module is used to receive the data encrypted by the information encryption module; A channel monitoring module, the channel monitoring module is used to detect channel information on the information transmission path; A data flow monitoring module, wherein the data flow monitoring module is used to monitor the information flow transmitted in the channel; A data simulation module, wherein the data simulation module is used to obtain the transmission status of data in the channel based on a data simulation model by taking the channel information obtained by the channel monitoring module and the information flow obtained by the data flow monitoring module as inputs of the data simulation model; The data judgment module is used to judge whether the data transmission situation in the channel has changed during the current period through a data judgment model.

5. According to claim 4, a network security information management system based on big data, Features: The information monitoring module includes the following working steps: B1, receiving the data encrypted by the information encryption module; B2. Detecting channel information on the information transmission path through a channel detection module; B3, monitoring the information flow transmitted in the channel through the data flow monitoring module; B4, based on the data simulation model, the channel information obtained in step S2 and the information flow obtained in step S3 are used as inputs of the data simulation model to obtain the transmission status of the data in the channel; B5. Determine whether the data transmission situation in the channel has changed during the current period through the data judgment model. If the judgment result is yes, the information detection result is that the information is in a safe state. If the judgment result is no, the information detection result is that the information is in a dangerous state. B6. Send the information that is judged to be in a safe state in step B5 to the information decryption module, and send the information that is judged to be in a dangerous state in step B6 to the data evidence storage module.

6. A network security information management system based on big data according to claim 5, Features: In step B4, based on the data simulation model, obtaining the transmission status of data in the channel specifically includes the following working steps: E1, calculate the stress σ of a single-segment information transmission in the channel, where the calculation formula is: Where F represents the force exerted on the information during the channel transportation process, P represents the information transmission impulse, t represents the time of information transmission in the channel, m represents the amount of data information, v represents the information flow rate of information transmission in the channel, and S represents the force area of ​​information during the channel transportation process; E2, calculate the strain ε of a single segment of information transmitted in the channel, the strain ε includes the strain ε in the horizontal direction x and the vertical strain ε y , where the calculation formula is: Where L x Represents the horizontal information length of the information transported in the channel, ΔL x Indicates the change in the horizontal length of the information transported in the channel, L y Indicates the vertical length of the information transported in the channel, ΔL y Indicates the change in the vertical information length of the information transported in the channel; E3, calculate the Young's modulus E of the end of the single-segment information in the channel, the Young's modulus E includes the Young's modulus E in the horizontal direction x And the Young's modulus E in the vertical plane direction y , where the calculation formula is: where σ x represents the stress in the horizontal direction, σ y represents the stress in the horizontal direction; E4, calculate the Poisson's ratio ν at the end of the single-segment information in the channel, where the calculation formula is: E5, calculate the Young's modulus E of the combined force of multi-terminal information h , where the calculation formula is: Where E xn represents the Young's modulus of the end of the nth information segment in the channel, E yn represents the Young's modulus of the end of the nth information segment in the channel; E6, calculate the Poisson's ratio ν of the combined force of multi-terminal information h , where the calculation formula is: where ν n Represents the Poisson's ratio of the end of the nth message segment in the channel.

7. A network security information management system based on big data according to claim 6, Features: The specific working method of the data evidence storage module is as follows: D1, first is the network security data entry stage, the queried end submits a network security data entry request, fills in the corresponding network security data transmission information according to the requirements of the network security data entry window returned by the network security data authentication module, and submits the network security data transmission information after filling in; D2, the network security data authentication module performs field inspection and format verification operations after receiving the network security data transmission information. After completion, it searches through the students in the network security data to see if there is duplicate network security data transmission information. If not, the network security data is stored in the database and then returned to the queried end to indicate that the network security data has been successfully entered, ending the network security data entry stage; D3, the second is the network security data authentication stage, where the query end submits a network security data viewing request to the evidence storage network security data management module. After receiving the request, the evidence storage network security data management module finds the network security data under the corresponding department through the department information of the query end and the provided multi-dimensional search criteria, and performs cache operations; D4, the query end selects the network security data transmission information to be authenticated, checks it, verifies its authenticity, fills in the authentication evaluation, and submits the authentication result to the network security data authentication module; D5, the network security data authentication module updates the evaluation information and authentication status to the corresponding network security data and then stores the network security data on the blockchain. At the same time, the shared model on the chain is called to process the network security data to obtain the network security data label and store it; D6, the next stage is the network security data query phase, where the queried end submits a network security data query request to the network security data query module; D7, the queried end modifies the network security data transmission information, writes a corresponding query request and submits the query information to the network security data query module; D8, the last is the network security data query processing stage. The query end submits a query processing request to the network security data query module. The network security data query module queries the current query request from the database according to the department where the query end is located, and searches the corresponding network security data list through the list in the query information. As in the network security data query stage, it needs to judge the network security data authentication status for reading; D9, the query end selects the query information to be processed, writes the processing information after review, and submits the query processing completion request to the network security data query module after completion.

Images