Research and Design of Visual Analytics System of Network Security Situation Based on Multi-source Log

Network security visualization takes advantage of the human perceptual and cognitive processes, provides an effective visual tool for analysts to understand the network status, find network anomalies, identify network attacks and solve other security problems. In this paper, with the help of visual analytics methods, uses its great advantages in network security analysis and massive data analysis, slices data in units of times, emphasizing network hierarchy, correlation, traffic timing analysis and collaborative interaction between views. A visual analytics system is developed to analysis the abnormal host asset communication, the abnormal analysis of database and user behavior and the analysis of abnormal traffic within 24 hours. Finally, the validity of the system in this paper is verified through the analysis of multiple set of cases.