Computer network security situation awareness platform architecture

Abstract

The invention discloses a computer network security situation awareness platform architecture. The computer network security situation awareness platform architecture comprises a network threat information module, an application system module, a data acquisition module and an analysis processing platform, wherein the network threat information module is connected with the application system module; the application system module is connected with the data acquisition module; the application system module and the data acquisition module are respectively connected with the analysis processing platform; and the analysis processing platform extracts the network threat information acquired by the data acquisition module. The computer network security situation awareness platform architecture has the advantages that information network related data are comprehensively collected; threat intelligence is fused for safety management and safety analysis based on a big data platform, asset management, vulnerability management, event management, threat alarm, investigation and analysis, emergency response and other service functions are achieved; and technical support is provided for safety operation (management, analysis and response) teams.

Description

technical field [0001] The present invention relates to the computer field, in particular to a computer network security situational awareness platform architecture. Background technique [0002] A computer, commonly known as a computer, is a modern electronic computing machine used for high-speed computing. It can perform numerical calculations, logical calculations, and has storage and memory functions. It is a modern intelligent electronic device that can run according to the program and process massive data automatically and at high speed. [0003] Composed of hardware systems and software systems, computers without any software installed are called bare metal. It can be divided into five categories: supercomputers, industrial control computers, network computers, personal computers, and embedded computers. More advanced computers include biological computers, photonic computers, and quantum computers. [0004] However, at present, computers are still subject to threat...

AI Technical Summary

Problems solved by technology

[0004] However, at present, computers are still subject to threats and attacks. Threats of attacks may come from flaws in application software or operating system design or errors in coding, or from design flaws in the process of business interaction or irregularities in logic flow. Reasonable

These flaws, errors or irrationality may be exploited intentionally or unintentionally, thereby adversely affecting an organization's assets or operations, such as information systems being attacked or controlled, important information being stolen, and user data being tampered with.

Images