Big Data-based Framework for Security Event Mining
LI Ming-gu · Communications technology · 2015
Security situation awareness is,just like the eyes and ears,to grasp and control the cyber space.Further,the acquisition of security event is the basis for security situation awareness.In the era of big data,security event mining is also a typical big data problem.This paper proposes a framework for mining security event by on-line and off-line mode.It provides a solution to detect security risks,potential threats and unknown attacks from the massive,multi-source,heterogeneous raw data.Moreover,the mined results can be used for implementing further processing,including security situation awareness,attack-source tracking attack-knowledge learning.