Research On Network Security Visualization Based On MulElemVis Framework

With the huge development of network communication technology,network applications have been bringing large convenience to our daily life but also exposing more and more network security problems.Network security mainly depends on the network security products to process and analysis by now,but network security analysts can no longer take advantages of the large number of complex data generated by security monitoring equipments as for the complexity of network and the upgrading of network security equipment.Especially when network breakdown or attackments happen,we can hardly find the accident source and even take any action.In recent years,information visualization technology has been experiencing large development relying on great demands in industry and in-depth scientific research,and it has provided many effective ways for solving the network security problems.This paper explores and improves the existing problems of network security visualization framework,network structure and multivariate visualization by referring to relevant literatures at home and abroad.The main contents are as follows.Firstly,this paper puts forward an object-oriented method for describing the network security data based on the visualization difficulties of network security data caused by its complexity or other reasons.Then,by summarizeing the existing frameworks' characteristics,a MulElemVis(Multiple Elements Visualization)framework and MVCVis(Multiple Views Cooperation Visualization)model are proposed for the versatility and poor uniqueness of other frameworks.Secondly,for the common network structure visualization method is invalid when the network size is very large,the CNM algorithm(Newman Fast Algorithm)the FDA algorithm(Force-Directed Algorithm)and the tree layout algorithm are improved by embedding the network structure characteristics.A multi-view collaborative visualization method based on network connection block view,multi-layer FDA layout and tree graph is designed.Then,aiming at the problem that the existing multivariate visualization method haslow spatial utilization rate and can not effectively exploit the characteristics of network security data,an object-oriented multivariate visualization method is proposed.A multivariate temporal visualization method is proposed by studying the multi-attribute attributes of communication content objects,service objects and transmission carrier objects.And a multivariate trend evaluation method is designed based on the improved weight-adjustable radar map.Finally,based on the proposed MVCVis network security data visualization model,a network security data visualization system is designed and implemented mainly for network structure and network multivariate objects.The proposed method is compared and analysed experimentally to verify the effectiveness of the improved network structure visualization and the feasibility of the MVCVis model.