【摘要】：為了提高IPS(入侵防御系統(tǒng))日志分析的效率和精準(zhǔn)度,提出一種輻狀節(jié)點(diǎn)鏈接圖可視化分析方法。針對(duì)經(jīng)典節(jié)點(diǎn)鏈接圖隨著數(shù)據(jù)量增加,節(jié)點(diǎn)變得擁擠、層次難以區(qū)分、空間利用率不高等問(wèn)題,結(jié)合節(jié)點(diǎn)鏈接圖和輻射圖的優(yōu)勢(shì),設(shè)計(jì)一種新的可視化技術(shù)變形即輻狀節(jié)點(diǎn)鏈接圖。分析VAST 2013 Challenge比賽中IPS日志。研究結(jié)果表明:在大數(shù)據(jù)環(huán)境下,該技術(shù)能夠合理分布節(jié)點(diǎn)以區(qū)分不同維度的IPS屬性,利用可視化篩選降低圖像密度,改進(jìn)布局算法以合理利用顯示面積以及產(chǎn)生圖形的聚類;該方法能有效地感知網(wǎng)絡(luò)安全態(tài)勢(shì),輔助分析人員決策;該輻狀節(jié)點(diǎn)鏈接圖的數(shù)據(jù)維度表現(xiàn)能力和業(yè)務(wù)層次控制能力較強(qiáng)。
[Abstract]:In order to improve the efficiency and accuracy of log analysis in IPS (intrusion Prevention system), a visual analysis method of radial node link graph is proposed. In view of the problems of the classical node link graph with the increase of data volume, the nodes become crowded, the hierarchy is difficult to distinguish, and the space utilization rate is not high, the advantages of the node link graph and the radiation map are combined. A new visualization technique called radial node link graph is designed. Analyze the IPS log of VAST 2013 Challenge match. The results show that: in big data environment, this technique can reasonably distribute nodes to distinguish IPS attributes of different dimensions, reduce image density by visual filtering, and improve layout algorithm to reasonably utilize display area and generate graph clustering. This method can effectively perceive the network security situation and assist the analyst to make decision, and the radial node link graph has strong performance of data dimension and control ability of service level.
【作者單位】： 中南大學(xué)信息科學(xué)與工程學(xué)院;湖南商學(xué)院現(xiàn)代教育技術(shù)中心;
【基金】：國(guó)家自然科學(xué)基金資助項(xiàng)目(61402540)~~
【分類號(hào)】：TP393.08

【相似文獻(xiàn)】

相關(guān)重要報(bào)紙文章 前1條

1 ;提供真正的No Downtime[N];網(wǎng)絡(luò)世界;2001年

，

本文編號(hào)：2140166