The Research on the expansion scheme of security operation center based on data self-balancing

Abstract

With the frequent occurrence of security incidents and the continuous growth of data levels, the processing of massive data places higher requirements on the analysis and storage capabilities of the security operation center. The cluster deployment mode makes the horizontal expansion a basic capability of the platform, but how to ensure data integrity and business continuity while expanding nodes is a key issue that needs to be solved. Based on the security operation center of the China Academy of Engineering Physics, this paper studied the technical details of the data migration expansion schemes and data self-balancing expansion schemes, and conducted comparative experiments in the laboratory. Finally, it proves the data self-balancing expansion schemes have more advance and feasibility than the data migration expansion schemes. The data self-balancing expansion schemes has been applied in the online system, which provides a certain reference for the expansion of other big platforms on the secret network in the future.