Design and implementation of big data-driven network comprehensive monitoring system

0 Preface

As network attacks become more complex and hidden, the traditional security system based on “protection” faces great challenges. Various detection technologies find possible security problems in the network from different angles, but cannot find out the real threats in the network accurately and effectively. New attack methods represented by advanced persistent threats such as ransomware and mining viruses bypass traditional border protection devices. Most traditional security monitoring methods are based on known rule bases for monitoring, but they are powerless against unknown threats. Complete traceability forensics and loss assessment cannot be done for the intrusion that is taking place or has caused losses.

Please download the details of this article: http://www.chinaaet.com/resource/share/2000003150

author information:

Zeng Bin, Zhang Wenpei

(1. Hunan Youdao Information Technology Co., Ltd., Changsha, Hunan 410000; 2. Chengdu Zhuoyuan Network Technology Co., Ltd., Chengdu, Sichuan 610041)