Design and Implementation of Network Security Data Visualization and Analysis System

doi:10.3969/j.issn.1671-1122.2016.11.007

Abstract

Abstract:

Focus on the issues that network abnormal data is displayed in an single way and it can’t be shown in real time, a network security data visualization and analysis system is designed and implemented. The functions of the system are network abnormal data monitoring, situation awareness and risk monitoring. Firstly, data collection model gathers original data of devices. Secondly, data preprocessing model transforms original data into standard format. Thirdly, data analysis model distinguishes abnormal data and forms network situation by analysing and detecting standard data. Finally, analysis results are real-time displayed by network map, topological graph, sequence chart,etc. The system combines data collection, data preprocessing, data analysis and data display, meanwhile implements real-time situation forecast and improves the effeciency of network device monitoring.

Key words: network security, visualization, situation awareness, anormaly detection

CLC Number:

TP399

Rujun LIU, Yang XIN. Design and Implementation of Network Security Data Visualization and Analysis System[J]. Netinfo Security, 2016, 16(11): 40-44.

Figures/Tables 6

References 13

[1]	王红凯,郑生军,郭龙华,等. 海量数据下分布式IT资产安全监测系统[J]. 信息网络安全,2016(2):60-65.
[2]	赵颖,王权,黄叶子,等. 多视图合作的网络流量时序数据可视分析[J]. 软件学报,2016(5):1188-1198
[3]	丁力,缪志敏,潘志松,等. 单分类算法中的数据可视化技术[J]. 数据采集与处理,2008,23(5):98-101.
[4]	张胜,施荣华,赵颖. 基于多元异构网络安全数据可视化融合分析方法[J]. 计算机应用,2015,35(5):1379-1384.
[5]	陈鹏,司健,于子桓,等. 基于信息熵的网络流异常监测和三维可视方法[J]. 计算机工程与应用,2015,51(12):88-93.
[6]	孙艺峻,张宏莉,何慧. 大规模网络安全事件预警可视化算法研究[J]. 计算机工程与应用,2007,43(21):115-117.
[7]	ZHAO Y, ZHOU F, SHI R.NetSecRadar: A Real-time Visualization System for Network Security: VAST 2012 Mini Challenge. Award: Honorable Mention for Interesting Use of Radial Visualization Technique[C]// VAST.proceedings of the Visual Analytics Science and Technology (VAST), 2012 IEEE Conference on, October 14-19, 2012,Seattle, WA, USA. New York: IEEE, 2012: 281-282.
[8]	CELENK M, CONLEY T, WILLIS J, et al.Predictive Network Anomaly Detection and Visualization[J]. IEEE Transactions on Information Forensics & Security, 2010, 5(2): 288-299.
[9]	杨连群,温晋英,刘树发,等. 一种改进的图分割算法在用户行为异常检测中的应用[J]. 信息网络安全,2016(6):35-40.
[10]	TAN P-N, M. STEINBACH, KUMAR V. Introduction to Data Mining [M]. 北京:人民邮电出版社,2011.
[11]	卿斯汉,蒋建春,马恒太,等. 入侵检测技术研究综述[J]. 通信学报,2004,25(7):19-29.
[12]	阎慧,曹元大. 一种基于入侵统计的异常检测方法[J]. 计算机工程与应用,2002,38(22):48-50.
[13]	席荣荣,云晓春,金舒原,等. 网络安全态势感知研究综述[J]. 计算机应用,2012,32(1):1-4.

[1]	Chun GUO, Changqing CHEN, Guowei SHEN, Chaohui JIANG. A Ransomware Classification Method Based on Visualization [J]. Netinfo Security, 2020, 20(4): 31-39.
[2]	Zhiyan ZHAO, Xiaomo JI. Research on the Intelligent Fusion Model of Network Security Situation Awareness [J]. Netinfo Security, 2020, 20(4): 87-93.
[3]	Tao JING, Wei WAN. Research on a P2P Network Communication Behavior Analytical Method for Status Migration Attribute-oriented [J]. Netinfo Security, 2020, 20(1): 16-25.
[4]	Yue QIU. Network Security Risk Analysis and Assessment of Large-scale Sports Events [J]. Netinfo Security, 2019, 19(9): 61-65.
[5]	Mengru GAO, Fangjun XIE, Hongqin DONG, Xiang LIN. Research on Network Security Evaluation System Oriented to Critical Information Infrastructure [J]. Netinfo Security, 2019, 19(9): 111-114.
[6]	Yuling LIU, Yunshan TANG, Qi ZHANG, Feng LI. Power Dispatch Software Security Situation Assessment Method [J]. Netinfo Security, 2019, 19(8): 15-21.
[7]	Wenli SHANG, Long YIN, Xianda LIU, Jianming ZHAO. Construction Technology and Application of Industrial Control System Security and Trusted Environment [J]. Netinfo Security, 2019, 19(6): 1-10.
[8]	Ke ZHANG, Youjie WANG, Shaoyin CHENG, Lidong WANG. Intrusion Collaborative Disposal Method of Spoofed IP Address in DDoS Attacks [J]. Netinfo Security, 2019, 19(5): 22-29.
[9]	Jianming FU, Lin LI, Rui ZHENG, Suriguga. Survey of Network Attack Detection Based on GAN [J]. Netinfo Security, 2019, 19(2): 1-9.
[10]	Li WEI, Qin DUAN, Zhiwei LIU. A Summary of Medical Information Security Management in Internet Era [J]. Netinfo Security, 2019, 19(12): 88-92.
[11]	Ran ZI, Jia LIU. Research on Construction of Risk and Trust Architecture Based on Lean Trust [J]. Netinfo Security, 2019, 19(10): 32-41.
[12]	Jie QU, Chunling FAN, Guangyong CHEN, Jintao ZHAO. Research on Establishment of Network Security Service Ability System for A New Era [J]. Netinfo Security, 2019, 19(1): 83-87.
[13]	Gang LU, Ronghua GUO, Ying ZHOU, Jun WANG. Review of Malicious Traffic Feature Extraction [J]. Netinfo Security, 2018, 18(9): 1-9.
[14]	Yi LI, Jian GU, Tiejun GU. Knowledge Modeling and Application of Quality Evaluation System for Complex Network Security Product [J]. Netinfo Security, 2018, 18(9): 55-59.
[15]	Gelin ZHANG, Yong LI. Non-negative Matrix Factorization Optimization and Its Application in Network Intrusion Detection [J]. Netinfo Security, 2018, 18(8): 73-78.