Research on Situation Analysis Technology of Network Security Incidents

With the rapid development of computer technology and Internet, the process of global informatization has been accelerated. The Internet is entering thousands of households and plays an indispensable role in our production and life. Network and network: users are growing exponentially, and the scale of the network is also growing. Therefore, there are more and more malicious activities against the network. How to effectively ensure the normal operation of the network has become a very critical issue. In order to prevent malicious intrusion from causing damage to the network and the loss of information resources, network managers need to be able to accurately and timely understand the current status and future security trend of the whole network, timely discover attacks and harmful behaviors, and make emergency response, so as to make reasonable emergency strategies for network security settings and resource allocation, so as to achieve advance prediction. The purpose of defense and defense in depth requires timely evaluation of network security status and prediction of future development trend, and timely understanding of network status. More and more people pay attention to network security situation assessment and prediction, which has become a hot issue in the field of network security management.