应用协议支撑系统AIS的可视化支持

发布时间：2018-04-08 19:31

本文选题：网络安全可视化　切入点：网络流量　出处：《东南大学》2016年硕士论文

【摘要】：随着网络技术的飞速发展,与网络相关的安全问题也越来越多。传统的基于文本的网络安全分析技术存在认知负担过重、人机交互能力差、无法把握对全局网络的认识,在面对数据量大时无法使用的特点。网络安全可视化来源于信息可视化,是信息可视化的新领域。通过网络安全可视化,可以将网络数据使用图形的方式展现给网络分析人员,同时网络分析人员可以与图形进行人机交互。这种方式大大的减少了认知负担,用户通过图形对网络进行分析,能够更快捷、方便地发现潜在的安全威胁。在有些情况下由于可以对可视化视图进行实时的操作,网络分析人员可以提前的进行防御。本课题的内容属于“211工程三期公共服务体系建设项目中国教育和科研计算机网主干网和重点学科信息服务体系升级扩容工程”,本课题意在为应用协议分类支撑系统AIS提供可视化功能,更好地支持CERNET的安全保障工作。本文的主要贡献如下：1.为现有的协议分类支撑系统AIS设计并实现多视图的可视化形式。2.设计了一组比较通用的非可视化结构依赖的格式化数据。通过这种格式化的数据或数据之间的组合可以作为新的视图的输入数据来实现新的可视化结构。3.将双向的层次桑基图结构用于展示IP地址之间的交互以及交互的数据信息,使得分析人员可以全局的把握网络流量特点。
[Abstract]:With the rapid development of network technology, there are more and more security problems related to network.The traditional text-based network security analysis technology has the characteristics of heavy cognitive burden, poor human-computer interaction ability, unable to grasp the understanding of the global network, and can not be used in the face of a large amount of data.Network security visualization comes from information visualization and is a new field of information visualization.Through the visualization of network security, network data can be displayed to network analysts using graphics, and network analysts can interact with graphics.In this way, the cognitive burden is greatly reduced, and the users can analyze the network by graphics, so that they can find the potential security threats more quickly and conveniently.In some cases, network analysts can defend themselves in advance because of the ability to manipulate visual views in real time.The contents of this project belong to "the third phase public service system construction project of 211 project, China education and scientific research computer network backbone network and key discipline information service system upgrade and expansion project",The purpose of this paper is to provide visual function for the application protocol classification support system (AIS), and to support the security of CERNET better.The main contributions of this paper are as follows: 1.Design and implement the visual form of multi-view. 2. 2 for the existing protocol classification support system AIS.A set of non-visual structured dependency formatting data is designed.This formatted data or the combination of data can be used as input data for the new view to achieve a new visual structure.The bidirectional hierarchical mulberry graph structure is used to display the interaction between IP addresses and the interactive data information, so that the analysts can grasp the characteristics of network traffic globally.
【学位授予单位】：东南大学
【学位级别】：硕士
【学位授予年份】：2016
【分类号】：TP393.08

【相似文献】