Network log information security scene type analysis system and analysis method thereof

Abstract

The invention belongs to the field of network security situation awareness, and particularly relates to a network log information security scene type analysis system and an analysis method thereof. The system comprises a log collection processing system, a distributed storage system, a data processing system and a log analysis system, wherein the log collection processing system is used for collecting log information and arp address table information from an exchanger and transmitting the log information and the arp address table information to the distributed storage system; the distributed storage system is used for storing the log information and the arp address table information; the data processing system is used for obtaining the log information and the arp address table information from the distributed storage system, analyzing the log information and the arp address table information, and realizing violent login security scene analysis operation and network device security scene trend analysis operation; and the log analysis system is used for displaying an analysis situation of the data processing system. According to the system and the method, the analysis on an unknown network device security scene trend of a terminal and the monitoring of violent login are realized, and the network information security can be subjected to risk early warning in time.

Description

technical field [0001] The invention belongs to the field of network security situation awareness, and in particular relates to a network log information security scene analysis system and an analysis method thereof. Background technique [0002] With the development and application of the Global Energy Internet strategy, the amount of various operating data of the power grid system has increased sharply and the data types are diverse, which puts forward higher requirements for data storage, processing, and value mining. Over time, from structured data analysis Transformation to multi-type data analysis, transformation from sampling data analysis to full data analysis, transformation from small batch data analysis to massive data analysis, transformation from single business data analysis to cross-business data analysis, and from quasi-real-time data analysis to real-time There is an urgent need for a transformation in data analytics. The transformation of multi-type data a...

AI Technical Summary

Problems solved by technology

[0003] At present, all kinds of log data with rich types and various collection methods have not been collected and stored in a unified manner. With the rapid increase of data capacity, the existing technology cannot timely and effectively obtain the analysis results of network security situation, so that it cannot accurately determine network equipment, Security risks of terminal equipment

Images