The invention provides a large-scale encrypted traffic frame-by-frame clustering
analysis method based on a
big data architecture, and relates to the technical field of
big data, and the method comprises the steps: carrying out the
data partitioning and storage of target encrypted data obtained through the preprocessing of original encrypted traffic data; based on a clustering
visualization result obtained by visualizing a target clustering result obtained by carrying out frame clustering analysis on the target encrypted data, judging whether a
data traffic abnormal behavior exists or not, and when the
data traffic abnormal behavior exists, generating an abnormal analysis report; and an abnormal analysis report is transmitted to safety management personnel so as to take corresponding measures in time for defense. The method comprises the following steps: visualizing a target clustering result obtained by carrying out frame clustering analysis after
processing and partition storage on encrypted traffic data based on a
big data architecture, identifying traffic data exception, generating an
exception analysis report when the exception exists, and transmitting the
exception analysis report to safety management personnel to take corresponding measures for defense. The network
threat identification capability is effectively enhanced, and the overall protection level of
network security is further improved.