摘要
[目的/意义]传统的网络安全防护技术,只能依据本身的数据规则库,将外部入侵操作、库内的数据特征比对,却难以阻止和应对不确定的入侵攻击、数据盗用行为.[方法/过程]利用大数据Hadoop分布式网络监测架构、SimHash算法,搜集和整合外部入侵攻击的安全漏洞信息,建立不同网络安全漏洞指标的标准化关系矩阵、安全态势评估模型,对大规模网络的多个控制节点进行模块权重设置、安全态势评估,并在Spark集群数据服务平台做出模拟仿真实验.[结果/结论]客观、准确的网络安全漏洞检测和管理结果表明,大数据技术用于网络安全管理的效果更好.
[Purpose/Significance]Traditional network security protection technology can only compare external intrusion operations and data characteristics in the database according to its own data rule base,but it is difficult to prevent and deal with uncertain intrusion attacks and data theft.[Method/Process]Based on this,the big data Hadoop distributed network monitoring architecture and simhash algorithm are used to collect and integrate the security vulnerability information of external intrusion attacks,establish the standardized relationship matrix and security situation assessment model of different network security vulnerability indicators,set the module weight and security situation assessment for multiple control nodes of large-scale networks,and make simulation experiments on spark cluster data service platform.[Results/Conclusion]Thus,more objective and accurate network security vulnerability detection and management results are obtained,which shows that the effect of big data technology in network security management is better.
作者
陈伟
李圆智
欧阳亨威
Chen Wei;Li Yuanzhi;Ouyang Hengwei(State Grid Anhui Electric Power Co.,Ltd.,Anhui Hefei 230061;State Grid Anhui Electric Power Research Institute,Anhui Hefei 230000;State Grid Huainan Electric Power Supply Company,Anhui Huainan 232007)
出处
《网络空间安全》
2022年第5期87-91,共5页
Cyberspace Security
作者简介
陈伟(1988-),男,汉族,安徽绩溪人,合肥工业大学,硕士,国网安徽省电力有限公司,高级工程师,主要研究方向和关注领域:电力系统自动化、大数据、网络安全;李圆智(1990-),男,汉族,安徽马鞍山人,华北电力大学(保定),硕士,国网安徽省电力有限公司电力科学研究院,工程师,主要研究方向和关注领域:电力系统自动化、电力监控系统、网络安全;欧阳亨威(1992-),男,汉族,安徽淮南人,南京工程学院,本科,国网安徽省电力有限公司淮南供电公司,工程师,主要研究方向和关注领域:网络与信息安全、计算机与网络。
