Explore the safety analysis platform of Venus-chen Big Data

After more than 10 years of development, China has made remarkable achievements in the construction and development of high-speed railway, and now has the world's largest and highest-speed high speed railway network. From the earliest 100 kilometers per hour "Dongfeng" diesel locomotives to the latest top speed of 486 kilometers of "harmony" high-speed car, China's railway technology to achieve a rapid leap-forward development, local technology has been in the forefront of the world.

Similarly, in the field of information security, Venus Chen Company also set security analysis and security management platform technology, ten years to sharpen a sword, the first in the domestic launch of the Big Data security analysis platform, one swoop will China's information security analysis and security management from the "Dongfeng" number of internal combustion engine into the "harmonious" high-speed railway era.

Let's take a look at the Big Data security analysis platform of Qiming stars and explore how it brings us into the "high-speed rail era" of information security analysis.

Compared with the traditional locomotive technology, the high-speed railway train has the characteristics of fast speed, much pulling, more types, creating value, comfortable and modern, and the high speed, mass, variety, high value and visualization of big data.

High speed

"Harmony" high-speed railway using EMU technology, compared to the "Dongfeng" internal combustion engine traction locomotive, its power-driven technology has been a revolutionary improvement, so as to ensure that the train speed from 100 km/h to 486 km/h. "Harmony number" used by the driving technology called the Power dispersion technology, which will be distributed in different locations of the train, can achieve greater traction, group flexible. Due to the use of dynamic braking wheel to many, high braking efficiency, and good speed performance, braking speed is large, so as to achieve high-speed travel, with high reliability, high fault tolerance. And the power concentration technology because of its own inherent deficiency, so that it can be fully competent at low speed, and high speeds will be large load, instability, speed and so on.

Qiming star of the Thai and Big Data security analysis platform similar to the use of a car-like decentralized security analysis technology, similar to the harmony of the car, Venus Chen Company Big Data security analysis platform to disperse all kinds of engine power into the various computing nodes, distributed computing, thus for large data acquisition, storage, Analysis and presentation provide a strong material base. Through the distributed computing technology, the Big Data security analysis platform can distribute the functions of data acquisition, storage and analysis in distributed nodes, in order to adapt to higher speed, it is necessary to expand the node data. Because of its dynamic dispersion technology, the single point failure does not affect the overall capability, so it has high reliability and high fault tolerance. This approach avoids the SIEM/SOC technical flaws of traditional power centralization. The traditional power centralized SIEM/SOC system can meet the demand well in the low-speed data situation, once the data speed increases, it is difficult to improve the processing ability of the whole system by improving the computing ability of the single node, just like the diesel locomotive can not increase to 200 km/h at the same time. Distributed computing technology provides a firm material base for the Big data security analysis platform.

Massive

Based on the "Harmony number" EMU and its integrated system, China's high-speed railway has realized the bus and high-speed operation, realized the operation efficiency of 5 minutes interval, and realized the massive transportation capacity. and Venus Chen Big Data security analysis platform with the help of distributed computing technology, the realization of the massive security information collection, storage, analysis and display. Security information from the data size and capacity, the original traffic is much larger than the network traffic metadata, and the network traffic metadata is much larger than security logs and events, Venus Chen Big Data security analysis platform can be implemented according to the needs of these three major data storage and analysis, the massive data distributed in the computing resources, and can freely expand computing resources and storage space. The platform is capable of processing petabytes of data and is characterized by high reliability, high scalability, high efficiency and fault tolerance. The processing of massive data is realized by high-speed processing technology, and the data security analysis platform adopts distributed file indexing technology to ensure the processing of massive data.

Diverse

High-speed EMU technology, so that a variety of train groups have a power-driven technology, so can accommodate a variety of train composition and train formation. The Venus-Chen Big Data security analysis platform has unique advantages when dealing with multiple types of data.

The Big Data Security analytics platform supports a variety of log sources and log types, and supports the acquisition of semi-structured (e.g. raw data messages, mail, Web requests and responses) and unstructured information (such as suspicious code, raw traffic, image files), and the ability to correlate analysis (i.e. contextual correlation) between heterogeneous data. Correspondence and correlation analysis from event to traffic metadata to raw traffic and files. The Big data security analysis platform realizes the preprocessing and storage of the collected data, transforms the required data into structured data, indexes and stores the unstructured data, and sends the data to the Distributed file system and memory for use by the analysis layer. It enriches the basic data of security analysis, guarantees the diversity of data sources, and provides a material basis for the combination and comprehensive association of various analytic methods.

Value

Due to the advantages of high-speed EMU, it has brought great economic value to the national economy and passengers, and created great economic benefits. It uses the traction electric drive system and the network control system and so on the key technology, only then makes the domestic high-speed railway speeding in the Shenzhou land, realizes the huge value. And the Venus-Chen Big Data security analysis platform can provide a variety of real-time and historical analysis methods, as well as analysis tool interface, to help security analysts from a huge amount of low-value data to obtain real valuable information, worthy of attention to information, for the support of decision-making and management support. This is a process and method of making big data smaller data, is also a process of data degradation, through the platform to provide effective analysis methods and tools to quickly extract high-value data from the vast amount of information, to create value for users, rather than drown the user in a huge amount of low-value data.

The Big Data security analysis platform uses distributed streaming memory analysis technology to realize real-time correlation analysis of security events and traffic metadata, and provides analysis technology based on Rule Association and contextual correlation. At the same time, the Analytics Management Center uses a continuous aggregation engine to perform machine learning-based real-time analytics on real-time data, and the machine learning engine uses a variety of learning methods to discover current security threats and attacks through real-time analytics.

Historical analysis of historical data stored in distributed computing storage nodes and databases can identify problems that have not been discovered in the past, help security analysts to investigate and analyze problems, improve algorithms, and eliminate recurring pitfalls. Historical analysis for the data stored in the Distributed file system, the function of the implementation of retrospective analysis, forensic analysis, query statistics, effectively make up for the traditional database technology inefficiencies.

Data mining for historical data to find valuable information about enterprises and organizations from a large amount of low-value data, which brings benefits to organization security management. Using Data Warehouse technology based on big data to analyze historical data and combine many data mining algorithms, the security analysts are provided with valuable security analysis decision support data.

Visualization of

"Harmony number" high-speed EMU technology through seamless rail and ballastless track, high standards of subgrade construction, advanced control technology to provide passengers with comparable to aircraft travel comfortable ride environment, make travel by train become a kind of enjoyment, greatly improve the experience and feelings of passengers. The bright star's Big data security analysis platform provides rich visualization capabilities and components in the presentation layer, visualizing the information that security analysts focus on, and presenting important and questionable data in an eye-catching manner. At the same time, to provide a friendly human-computer interaction interface, the security analyst can use human-computer interaction to make Visual Editing association analysis rules, write data analysis algorithm and verify the analysis results, in order to continuously improve and modify the method, improve the accuracy of the analysis and platform value. The platform also provides a rich external interface to facilitate integration with third-party systems, including third-party analysis systems, display systems and security tools.

Today, China's high-speed railway technology because of its world's longest operating mileage, the richest operating routes and diversity, cost-effective construction costs and leading technology, is making it gradually out of the country to the world, I believe with the Venus Chen Big Data Security analysis platform for continuous improvement and development, With Venus Chen in the Business intelligence platform in the field of domestic information security leading level and in the Security analysis security management platform Rich technical accumulation, Venus Chen Tai Data Security analysis platform will continue to benefit domestic customers at the same time, to the world, for more customers bring value!

Venus Chen Company has set up a special product division in charge of the Big Data security analysis field and the Thai series control class and audit class system research and development, consulting, project implementation and operation and maintenance. We have research and development centers in Beijing, Shanghai and Guangzhou respectively in our products division.

As China's earliest research and development and one of the most advanced security management platform, Venus Chen Tai-TSOC series of pipe platform after more than 10 years of continuous accumulation, access to more than 10 invention patents, has been supported by a number of national special funds, and has the current domestic largest customer base, From 2008 to 2013 for six consecutive years ranked China's security management platform market share first, has become an absolute leader in the field of security management platform, and also ranked in the domestic Big Data security analysis field leader Camp.

Explore the safety analysis platform of Venus-chen Big Data