【24h】

SIEM Based on Big Data Analysis

机译:基于大数据分析的SIEM

获取原文

摘要

Information security problem being more and more serious, plenty of data about security being produced fast, the Security Information and Event Management (SIEM) systems have faced with diversity of Volume Big data sources, so it is necessary that big data analysis should be used. This paper presents the architecture and principle of SIEM systems which use popular big data technology. The information security data is transferred from flume to Flink or Spark Computing Framework through Kafka and is retrieved through Elastic Research. The K-means algorithm is used in analyzing the abnormal condition with spark mllib. The report of experiment and results of SIEM shows it is efficient systems process big data to detect security anomaly. In the end, the full paper is summarized and the future work should be the usage of stream computing in the SIEM to solve inform security problem in large-scale network with the continuously producing information security data.
机译:信息安全问题越来越严重,有关安全性的大量数据快速生成,安全信息和事件管理(SIEM)系统面临着大量大数据源的多样性,因此有必要使用大数据分析。本文介绍了使用流行的大数据技术的SIEM系统的体系结构和原理。信息安全数据通过Kafka从水槽传输到Flink或Spark计算框架,并通过Elastic Research检索。 K-means算法用于通过火花mllib分析异常情况。 SIEM的实验报告和结果表明,它是一种有效的系统,可以处理大数据以检测安全异常。最后,对全文进行了总结,并指出未来的工作应该是利用SIEM中的流计算来解决不断产生信息安全数据的大规模网络中的信息安全问题。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号