网络安全数据可视分析系统的设计与实现

Design and Implementation of Network Security Data Visualization and Analysis System

文章针对网络异常数据展示形式单一、时间延迟的问题,提出一个采用丰富可视化形式和实时展示网络安全态势的网络安全数据可视分析系统。该系统功能主要包括:网络异常数据监测、态势感知和预测、安全预警与风险监控。首先,通过数据采集模块收集设备原始数据;其次,利用数据预处理模块将原始数据转化成标准形式;再次,使用数据分析模块将标准数据进行分析和检测,识别异常数据并形成网络态势;最后,采用网络地图、拓扑图、时序图等多种可视化形式对分析结果进行实时展示。该系统将数据产生、处理、分析和展示过程相结合,实现态势状态实时预测,提高网络设备监控效率。

Focus on the issues that network abnormal data is displayed in an single way and it canst be shown in real time, a network security data visualization and analysis system is designed and implemented. The functions of the system are network abnormal data monitoring, situation awareness and risk monitoring. Firstly, data collection model gathers original data of devices. Secondly, data preprocessing model transforms original data into standard format. Thirdly, data analysis model distinguishes abnormal data and forms network situation by analysing and detecting standard data. Finally, analysis results are real-time displayed by network map, topological graph, sequence chart, etc. The system combines data collection, data preprocessing, data analysis and data display, meanwhile implements real-time situation forecast and improves the effeciency of network device monitoring.