INFORMATION SECURITY MANAGEMENT METHOD BASED ON BIG DATA

摘要

Disclosed by the present invention is an information security management method based on big data, which comprises: capturing traffic data packets of a node on a network online at different time periods, analyzing and studying the captured data packets, and constructing traffic contour lines in a normal state at the different time periods; continuing to capture traffic data packets on the network in real time and expressing same in the form of a curve so as to form a real-time traffic curve; comparing the real-time traffic curve to the traffic contour line of a corresponding time period to determine whether there is any abnormality; if there is no abnormality, performing calculations for the real-time traffic curve and the traffic contour line of the corresponding time period to generate a new traffic contour line; if determined that there is an abnormality, marking user information as restricted access status, and restricting an external link from accessing the user information in the present time period; repeating process 2 and process 3, and when the comparison result between the real-time traffic curve and the traffic contour line of the corresponding time period is determined as no abnormality, re-marking the user information as normal.