Data analysis system

Abstract

The invention discloses a data analysis system comprising a virus feature library, a regular inspection module, a virus feature matching module, a port auditing module, a traffic counting module, a network health judging module, a virus simulation module, an emergency channel module, a reduction module, and a data isolating and uploading module. The network traffic is monitored and audited in order to keep the network in good condition. Through analysis and memorization of unknown intrusion behaviors, the immune ability of the network is improved. After invasion, the hazard scope can be controlled effectively to ensure smooth network and normal service providing. The system has the ability to self-repair and -reduce, and can maintain stable operation of the network. Through use of the distributed technology and the load balancing technology, a large amount of network traffic data is jointly analyzed by multiple network traffic analysis engines, so the waiting time is reduced for users, and the overall performance of the system is improved. Moreover, the system has data protection ability, and the occurrence of information loss when a user is away from the computer is avoided.

Description

technical field [0001] The invention relates to the field of computer networks, in particular to a data analysis system. Background technique [0002] With the rapid development of computer technology and network, computer has become an indispensable tool in people's work, study and life. Similarly, the development of computer networks has also brought hidden dangers to the security of users' computer information. Network information theft, information attacks, virus transmission, etc. exist and occur all the time. [0003] Network security is a key issue that has been studied in the field of computer network and its application. However, the traditional network security theory and technology have the following three insurmountable defects. Firstly, the method of centralized control seems powerless for the current distributed network environment; secondly, the network has isomorphism, which cannot prevent suspicious intruders and viruses from spreading rapidly and widely; ...

AI Technical Summary

Problems solved by technology

[0006] (2) The existing network traffic analysis system does not track and analyze the whole process of the session during the analysis process, and cannot analyze the behavior in the network, so the security of the application layer of the network session cannot be guaranteed

[0007] (3) Most of the existing network traffic analysis systems are deployed on a single node, with weak data processing and analysis capabilities, and do not have the ability to analyze and process large-scale network traffic information

Images