大数据环境下安全海量规则分析技术研究

Research on Network Security Analysis Technique of Massive Rules in the Age of Big Data

大数据环境下异构的网络安全设备会产生海量的安全事件,本文针对大数据具有的数据量巨大、查询分析复杂的特点,分析面向大数据的网络安全海量规则分析处理的相关技术,提出对各类数据源进行清洗整合,通过安全事件的关联分析,对安全规则建立描述模型,提出安全事件海量规则的模糊等量约束的因果关联算法和时空同现模式挖掘安全事件的规则间关联算法.

In the age of Big Data, we should consider large-scale, heterogeneous network security behavior. In this paper, according to the features of huge amount and complex, Big Data analysis technologies for network security massive rules were proposed. Various types of heterogeneous data sources by data cleaning were analysised. The key data through security event correlation and spatiotemporal co-occurrence pattern mining security event correlation rules were proposed.