开源安全大数据分析平台综述  

Overview of Open Source Security Big Data Analysis Platform

作　　者：裴兰珍[1,2] 赵英俊 罗赟骞[3] 邬江 许冰 PEI Lan-zhen;ZHAO Ying-jun;LUO Yun-qian;WU Jiang;XU Bing(School of Air and Missile Defense,Air Force Engineering University,Xi'an 710051,China;Unit 95899 of PLA,Beijing 100085,China;China Electronics Cyberspace Great Wall Limited Company,Beijing 102209,China)

机构地区：[1]空军工程大学防空反导学院,西安710051 [2]解放军95899部队,北京100085 [3]中电长城网际系统应用有限公司,北京102209

出　　处：《电子信息对抗技术》2019年第6期56-60,共5页Electronic Information Warfare Technology

摘　　要：随着海量网络数据的产生以及攻击的日益先进化,网络空间安全面临着巨大的挑战。首先,从安全数据收集、安全数据接收和存储、安全数据分析和安全数据展现等4个方面比较分析了6个开源安全大数据分析平台;然后,给出了安全大数据分析平台构建原则;最后,提出了一个由数据采集、接收、存储、分析和展现构成的通用安全大数据分析框架,用于指导安全大数据分析平台建设。With the generation of massive network data and the increasingly advanced attacks,the cyberspace security faces great challenges.First,six open source security big data analysis platforms are compared and analyzed from four viewpoints which include security data collection,security data ingest and storage,security data analysis and security data presentation.Then,the principles of building the security big data analysis platform are proposed.Finally,a security data analysis framework is proposed,which is general and big.It is consisted of data collection,ingesting,storage,analysis and presentation to guide the construction of the security big data analysis platform.

关 键 词：网络空间安全 安全分析框架 安全大数据 机器学习 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]