Design And Implementation Of Visualization System For Multi-source And Heterogeneous Cybersecurity Data

With the development and popularization of the cyber network,the data circulating on the network is becoming more and more complex,and the structure types are more and more;and people's production and life are also more and more dependent on the normal operation of the network;but at the same time,the frequency of network attacks is also more and more frequent,the form is more and more high-level,hidden,therefore,in the increasingly complex form of network security,how to ensure the security of the network Operation,prevention and early identification of accidents and attacks have become the focus of all walks of life.In this paper,we take network security and other related data as the center of visual analysis,through a variety of visual methods to achieve efficient extraction,display and analysis of network security situation information,the main research content can be summarized as follows:(1)Design and implement a visualization method of planar topology network,which can manage and analyze the information of the network in a unified way,support the users to view and edit,and comprehensively analyze and depict the network security situation from the local to the whole by combining the network traffic data and network security data.(2)Design and implement a visualization of network topology based on the layout of force guide diagram,which provides a 3D view with higher space utilization and more beautiful visualization effect for the monitoring network,and supports a variety of layouts to display the hierarchical relationship and data comparison of network equipment in an all-round way.(3)Design and implement an attack link visualization method,combined with webg13d animation and plane tree visualization method,dynamically and multi dimensionally show the spread path of attack on the physical network link,and assist users to analyze the attack process.(4)Design and implement a data model based on network security events,and the open-source attack traffic log data on the network is modeled based on this model,and the attack related event nodes are extracted by using the Louvain clustering algorithm,and the attack mode is presented by visualization of three-dimensional force guidance graph,which provides a new analysis way for the research of network attacks.(5)On the basis of the above three points,design and implement a network security data visualization analysis system with multiple basic visualization capabilities and innovative visualization analysis methods,support users to customize charts and insert other pages of the system through templates,and help analysts to conduct more comprehensive,customized and effective network security analysis.The visualization system designed in this paper can quickly present the situation and identify the attack pattern of malicious traffic by using two-dimensional and three-dimensional basic charts,which has a certain practical significance for network security early warning.