Research on Electric Power Information Systems Network Security Situation Awareness Based on Big Data Technology

Abstract

Abstract. With the rapid development of the network scale and its applications, network security threats continue to increase, a single network security protection technology could not meet the requirement. Network security situation awareness can dynamically reflect the overall network security and predict network security development trends. Big data analytics technology provides the basis for the research of network security situation awareness. In this paper, we explore the problem of network security situation awareness for electric power information systems under big data environment. In order to monitor network security problems, a network security situation awareness technology based on multi-source logging methods by utilizing big data analysis is proposed. We apply this technique to the information system environment of a certain electric power company. We deployed network traffic security analyzer (TSA) in the export of company Internet network. It can acquire and storage the original network traffic in real time. By using the big data visualization analysis tool and rich data display component, the realization of the multidimensional graphical visualization of the analysis results is presented.

Hierarchical Network Security Situational Awareness Model Based on Honeypot Technology

“…Network situation refers to the operation status of equipment at different levels of the network, mainly including network behavior and user behavior. If the above two behaviors change, the network situation will change synchronously, so as to perceive the network security threat [5].…”