基于大数据技术的网络安全态势感知研究

Research on Network Security Situation Awareness Based on Big Data Technology

随着网络技术的不断发展,网络空间的安全问题也越来越复杂,各类持续、隐蔽的网络攻击严重威胁着人们的隐私安全,传统的网络安全防护措施主要进行静态控制,网络安全防护相对被动,无法抵御新型网络安全威胁的防护。网络安全态势感知对传统安全防护措施进行优化与改进,根据网络安全设备告警信息及其他信息进行实时关联归并与数据融合,更加全方位、多层次地反映网络运行情况,并能够离线分析历史数据,预测潜在可能的威胁。因此针对基于大数据的网络安全态势感知技术进行探讨。

With the continuous development of network technology,the security problems in cyberspace are becoming more and more complex.Various kinds of continuous and hidden network attacks seriously threaten people’s privacy and security.Traditional network security protection measures mainly carry out static control,and network security protection is relatively passive and cannot resist the protection of new network security threats.Network security situational awareness optimizes and improves the traditional security protection measures,and provides realtime correlation and data fusion based on network security device alarm information and other information to reflect network operation in a more comprehensive and multi-level manner,and can analyze historical data offline to predict potential possible threats.The article focuses on the network security situational awareness technology based on big data.