基于大数据的网络安全态势感知系统研究

A Research on Network Security Situation Awareness System Based on Big Data

工控网络安全形式日趋严峻,伴随着攻击手段复杂化、信息安全威胁扩大化。相较于常见的网络安全措施,网络安全态势感知的出现改变了工控网络安全的现状。网络安全态势感知能够及时发现在网络监视、紧急情况响应和网络安全预测等方面存在的漏洞和威胁。同时,它还可以针对现有状况进行正确评估,判断其可能带来的不良影响,预判一段时间内的网络状况。网络作为信息时代大数据不断积累的产物,存在着各种各样的安全问题,本研究基于大数据技术,分析网络安全态势感知的特点及趋势,为网络安全态势感知系统的构建提供了参考。

Industrial control network security is in an increasingly tough position,which is accompanied by more complicated attack techniques and more extensive threat on information security.Compared with common network security measures,the emergence of network security situation awareness has changed the current situation of industrial control network security.In addition to the capability of finding vulnerabilities and threats timely in network monitoring,emergency response and network security prediction,network security situation awareness can also make a correct assessment of the existing conditions to judge their possible adverse effects and then predict how the network runs in a period of time.As a product of constant accumulation of big data in the information age,the network also has a variety of security problems.Based on big data technology,this study analyzes the characteristics of network security situation awareness and its trend,hoping to provide reference for the construction of network security situation awareness system.