多视图协同的网络流量数据可视分析方法研究

Research on Visual Analysis Method Based of Multi-view Collaboration on Network Traffic Data

网络安全可视化将网络安全数据通过可视化的方式呈现与分析,加强分析人员对网络状态的理解,更直观的发现网络异常,识别攻击行为.本文针对网络流量数据,提出了一个分析方法,从网络态势、流量状况和网络节点连接,从宏观到细节的对网络当前状态进行分析,达到识别网络异常的目的.该分析方法中包含有3个可协同交互的可视视图,可以多层次、多角度的展示网络流量数据并进行交互分析,使复杂的网络数据更加生动形象地展示出来,便于分析人员理解网络流量情况.

Network security visualization presents and analyzes network security data in a visual way,strengthens analysts’understanding of network status,and more intuitively finds network anomalies and identifies attacks.This paper proposes an analysis method for network traffic data,which analyzes the current state of the network from the macro level to the details from the network situation,network traffic status and network node connection,so as to identify network anomalies.This analysis method includes three collaborative and interactive visual views,which can display network traffic data from multiple levels and angles and conduct interactive analysis,so as to present complex network data more vividly and facilitate analysts to understand network traffic.