Fast Detection Device and method of Abnormal Network Traffic on Sankey and Parallel Coordinates Security Visualization

摘要

An embodiment of the present invention relates to a rapid abnormal traffic detection apparatus and method using raw key and parallel coordinate security visualization. In one example, the present invention provides a security device for collecting abnormal traffic from the Internet and intranets; a computer device that receives the event log from the security device and visualizes it as a dashboard having a raw key diagram and a parallel coordinate diagram at the same time; and a display device for displaying a dashboard having a raw key diagram and a parallel coordinate diagram.