论文部分内容阅读
针对入侵检测系统警报日志传统的分析方法在处理海量信息时存在认知困难、实时交互性不强等问题,提出了基于入侵场景的可视化呈现系统,完成从警报日志到入侵场景的可视化过程,并利用3D游戏引擎将网络攻击过程在3D场景中展现出来.目标是使网络分析人员能够在更高层次对网络安全状况有深入的认识,以做出相应判断和应对.通过用户评价和性能测试实验证明其具备可用性并具有较强的可视化能力.
Aiming at the problems existing in the intrusion detection system alarm log, such as the traditional visualization method of dealing with huge amount of information, such as cognitive difficulties and poor real-time interactivity, the visualization system based on the intrusion scene is proposed. The visualization process from the alarm log to the intrusion scene is completed. The use of 3D game engine will be the scene of the network attack in the 3D scene show.The goal is to enable network analysts at a higher level on the network security situation in-depth understanding to make the appropriate judgments and response.Through user evaluation and performance testing experiments Prove its availability and strong visualization capabilities.