基于大数据的安全态势感知系统研究

近年来，大数据、云计算等技术加速发展。同时，在信息安全威胁不断扩大和攻击手段日益复杂的影响下，工控网络安全形势呈严峻趋势。相比常规网络安全措施，网络安全态势感知能在一定程度上使工控网络安全现状有所改变。该感知系统可及时发现网络安全预测及监视等多个环节中存在的漏洞，能够正确评估现有的网络现状，并对网络可能带来的负面影响加以评估，将未来特定时段内的网络状况加以预测。网络，是大数据时代的必然产物，受网络技术的虚拟性影响，不可避免存在安全问题。基于此，文中在研究中首先分析了网络安全态势感知及技术。其次，总结了网络安全态势感知系统研究的框架。最后，研究了基于大数据的安全态势感知系统研究模块及实现。

Research on Security Situation Awareness System Based on Big Data

In recent years, the development of technologies such as big data and cloud computing has accelerated. At the same time, under the influence of expanding information security threats and increasingly complex attack methods, the security situation of industrial control networks presents a grim trend. Compared with conventional network security measures, network security situational awareness has changed the current situation of industrial control network security to a certain extent. The awareness system can timely detect vulnerabilities in multiple links such as network security prediction and monitoring, correctly assess the current status of the network, assess the potential negative impact of the network, and predict the network situation in a specific period of time in the future. The network is an inevitable product of the era of big data. Due to the virtualization of network technology, there are inevitably security issues. Based on this, this paper first analyzes network security situational awareness and technology in the research. Secondly, summarize the framework of network security situational awareness system research. Finally, the research module and implementation of a security situational awareness system based on big data are studied.