The invention relates to the technical field of
network security monitoring, in particular to a block chain-based
network data security monitoring system, which comprises a pre-chain event integration module, a field writing constraint module, an
event evolution verification module, a structure association
verification module and an evidence storage control module. According to the method, semantic-level integration and session-level continuous identification are carried out on the communication flow, so that the security event forms a
record by taking complete communication
semantics as a basic unit, the event field state has consistency and
interpretability, the evolution sequence is corrected in the event time direction and the connection state level, the communication process is prevented from being mistakenly split, and the communication efficiency is improved. Through cooperative
verification of communication object behaviors and response states, a single
event structure is ensured to be complete and conform to
security monitoring semantics, and a condition matching and sequence adjusting mechanism is introduced in a writing process, so that event records have verifiable evolution trajectories and non-repudiation evidence storage results, and the reliability of the event records is improved. And the credibility and audit value of
network security monitoring are improved.