靶场多源数据智能研判系统及方法

By using a pluggable microkernel architecture and distributed stream processing technology, combined with multidimensional aggregation and causal correlation matching algorithms, the problems of data dispersion and complex attack identification in intelligent analysis of multi-source data in the target range are solved, and efficient and real-time intelligent analysis and decision support are achieved.

CN122247757BActive Publication Date: 2026-07-17SICHUAN YILAN SITUATION TECH CO LTD

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
SICHUAN YILAN SITUATION TECH CO LTD
Filing Date
2026-05-20
Publication Date
2026-07-17

AI Technical Summary

Technical Problem

Existing technologies for intelligent analysis of multi-source data in target ranges suffer from problems such as scattered data sources, inconsistent protocol interfaces, lack of structured design in analysis processes, reliance on static rules for event correlation, lack of quantitative scoring mechanisms, and insufficient visualization. These issues lead to fragmented information, difficulty in identifying complex attacks, and low efficiency in actual combat response.

Method used

It adopts a unified access gateway with a pluggable microkernel architecture, a distributed stream processing architecture, a multi-dimensional aggregation and causal association matching algorithm, a multi-factor weighted scoring decision engine, and a front-end and back-end separated visualization display to achieve efficient aggregation, standardized processing, intelligent correlation analysis, and dynamic strategy determination of multi-source data.

Benefits of technology

It achieves lossless aggregation and real-time standardized processing of multi-source data, improves the intelligent judgment capability of complex attack chains, enhances scenario adaptability and decision support, and supports real-time scheduling and post-event review analysis.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN122247757B_ABST
    Figure CN122247757B_ABST
Patent Text Reader

Abstract

本发明公开了一种靶场多源数据智能研判系统及方法,涉及数据处理技术领域,包括:通过插件化微内核网关采集多源异构数据并统一封装;利用分布式流处理架构对数据进行清洗与标准化,输出统一事件模型流;基于时间滑动窗口与时序规则进行事件聚合与因果关联,构建研判事件链;根据预置的多维规则模板与动态策略集,对研判事件链进行多因子加权评分计算,得出综合风险值,并依据预设阈值区间自动判定风险等级;通过前后端分离架构获取研判结果数据,并渲染生成统计图表、动态拓扑视图及攻击时间线,同时自动生成演练报告。本发明实现了数据的高效汇聚与实时标准化,提升了复杂攻击的研判能力、场景适应性及全过程态势的可视化水平。
Need to check novelty before this filing date? Find Prior Art