关键词: 高级可持续性攻击, 大数据, 数据管理, 深度分析, 数据挖掘

Abstract: In the age of big data, the introduction of big data analytics technology to advance persistent threat defense system is inevitable. Based on big data analysis technology, the paper proposed a reference framework for protection of advanced persistent threat, fully considering the requirement of advanced persistent threat protection framework, all the possible attack mode and protection methods. Through deep correlation analyzing the monitoring data by big data technology, we could not only obtain a comprehensive analysis about if the target system in the risk of being attacked to achieve prewarning, but also detect the ongoing attacks and understand the intent more accurately to achieve realtime blocking. Meantime, according to track the data path to reproduce the historical status and evolutionary process , post audit traceability is realized.

Key words: advanced persistent threat, big data, data management, deep analytics, data mining