关键词:

Abstract:

For the existing network security strategy in dealing with the alarm information, the calculation structure is single, resulting in long running time and low efficiency, this paper proposes a network security technology research based on multi-source alarm information correlation analysis. On the basis of clarifying the attack intention, the effective alarm information data is extracted, and the multi-source alarm information is aggregated and de redundant by association analysis algorithm; the alarm information management process based on association analysis rule matching is designed, and the network security technology platform is established to realize the network security technology research based on multi-source alarm information association analysis. The experimental results show that in the same running time, the number of alarm information is significantly reduced, and the network security alarm rate is improved.

Key words: multi source, alarm information, network security, multi source fusion, technical defense technology