Network security events macro alert and response analysis technology based on network topology

Network security events such as worms can greatly compromise the Internet. To date, how to quickly detect and effectively control the emergence and development of such events has become one of the focuses of research among network security experts. The research includes combining active measures with anomaly detection, implementing a large-scale network security event cooperative alert system, focusing on macro alert analysis, choosing a control point, creating control suggestions, etc. After the process of visualization, it exhibits preferable application effects.