Situation Awareness Solution

Traffic visualization, big-data analytics, DPI, and anomaly cleaning for network situation awareness.

Layered, Decoupled Architecture Design

Layer and decouple data collection, processing, storage/analysis, and presentation to build open traffic big data infrastructure; share traffic data with third-party platforms via standard APIs for multidimensional application capability.

Comprehensive, Powerful Sensing Capability

Comprehensively sense network posture across network (traffic, behavior, content), security, assets, and applications, enabling fine-grained intelligent O&M and stronger defense.

Outstanding Recognition and Restoration

Can identify more than 18,000 common applications and protocols in 23 major categories; restore web pages, email, audio/video, images, and more; and can be custom-developed for different business scenarios to meet needs quickly.

Solution Architecture

1590741415120006.png

The situational-awareness system is designed in three layers, i.e., three core subsystems: a traffic collection and processing system, a traffic big data analytics system, and a security situational-awareness system.

Traffic collection and processing system: Deeply process network-wide business traffic; use DPI and DFI to aggregate and split traffic, keep same-source same-destination, build flows, recognize application protocols, extract protocol metadata, perform fine-grained protocol recognition, produce fine-grained 5-tuple CDRs, and more.

Traffic big data analytics system: The whole system keeps six months of full-traffic session information, can backtrack historical data, and can train and analyze models with AI and big data analytics to predict abnormal traffic.

Security situational-awareness system: Security situational awareness, through full-traffic collection and processing combined with big data and AI, builds a security baseline and can discover anomalies such as abnormal traffic, off-site logins, and violations; network-traffic situational awareness can sense traffic posture from five layers: link, subnet, zone, user, and application; network-behavior situational awareness can perform fine-grained business recognition of Layer 2–7 protocols on the network.

Solution Value

Recommended Products

网络态势感知系统NSA
Sugon Network Situation Awareness combines traffic visualization, big-data analytics, DPI, anomaly cleaning, and threat discovery on Sugon high-performance hardware. It ingests network-wide traffic, mines it in depth, and visualizes network, security, asset, and application posture—traceable, perceptible, and predictive for the whole data center, enabling refined intelligent operations.
View Details >

Contact Us

After-Sales Service

Solemn Statement