APT monitoring and defending system based on big data analysis

Abstract

The invention discloses an APT (Advanced Persistent Threat) monitoring and defending system based on big data analysis, comprising a data acquisition layer, an information preprocessing layer, a comprehensive analysis and data storage layer, and a presentation layer. The data acquisition layer is connected with the information preprocessing layer, the information preprocessing layer is connected with the comprehensive analysis and data storage layer, and the comprehensive analysis and data storage layer is connected with the presentation layer. The data acquisition layer acquires local data of terminals and network data. The APT monitoring and defending system can be used to defend the security of information networks in finance, commerce, tax, party and government, and the like, ensure legitimate communication of normal business application systems, and resist network APT attacks, so as to protect the information security infrastructures and the important network information systems in our country. The APT monitoring and defending system has multiple functions such as information flow detection and alarm, operation process supervision and auditing, and data restoration and recovery support.

Description

technical field [0001] The invention relates to the field of network monitoring and defense, in particular to an APT monitoring and defense system based on big data analysis. Background technique [0002] With the in-depth development of informatization in various fields of the national economy and society, the corresponding security issues have become more prominent. Currently, cyber attacks have been regarded as one of the major security threats facing the world. Problems such as cyber theft, abuse of personal privacy, and ideological infiltration by hostile forces using the Internet are becoming more and more prominent. After the information system is damaged, the damage to national security, social order, and public interest will be more serious. [0003] In recent years, APT (Advanced Persistent Threat) attacks have become a focus of attention and discussion in the industry. APT attacks generally refer to the continuous intrusion and penetration of government agencies...

AI Technical Summary

Problems solved by technology

Especially for our country, which is in a period of rapid development, once a hostile force or organization spends a high cost to carry out a targeted APT attack against our country's important information system and succeeds, the harm caused will be incalculable

Images