Supercomputing-based cybersecurity event analytical processing system: construction conception

Abstract

The growth in the volume of collected data on cybersecurity events and the development of methods and tools for their reliable storage leads to an increase in the relevance of developing new methods and algorithms for analyzing large and ultra-large data sets of this class. The paper examines the concept of building the supercomputing-based cybersecurity event analytical processing system, produced in the interests of state assessment, decision support and investigation of computer incidents in critical infrastructures. Approaches to the application of supercomputing to large cybersecurity data processing have been analyzed. The architecture of a system for analytical processing of heterogeneous cybersecurity event data based on supercomputing has been proposed and discussed.