Research And Implementation Of Network Security Data Visualization System

In the era of rapid development of Internet, network security has become a problem that cannot be ignored due to its potentially serious threats to enterprises. Visual display technologies of network security data can help network administrators recognize network threats visually and effectively, and guarantee the network security of enterprises. Researchers at home and abroad have made a lot of researches and have gained some achievements in the field of visual display of network security data.However, it still need further researches on detection efficiency of network security data and display effect.This article has accomplished several tasks to improve detection rate and provide convenient and useful visualization management method to the network administrators of enterprises.1) In order to deal with the issues that traditional network security data visualization form is single and cannot provide overall analysis of network state, a new visualization model was put forward. This model can analyze network security data, recognize abnormal events and display by diversified visualization forms.Information Gain feature selection method was used to reduce the dimension of the data while Random Forest algorithm was used to classify data in the data analysis module of the model. In the experiments, the method can enhance detection rate and time efficiency. ECharts and jTopo visualization tools were chosen to draw network map, topological graph, dashboard, bar chart and time series plot in the visualization module. The method help network administrators analyze network situations quickly.2) A network security data visualization system was designed and implemented. Firstly, analyze the demand of system and design overall framework. Framework design included system architecture design, database design and the establishment of running environment. Then implement the system. There are four sections in system implementing including data collection, data standardizing, data analysis and visualization system.3) Test the network security data visualization system. Testing refers to preparation before testing, data standardizing and analysis testing, visualization results testing and overall system testing. The test results show that the system has achieved thr goals demanded in the document.