Second, the paper proposed the design and implementation of threat datacollectionsubsystem, alert correlation subsystem and attack data extraction subsystem.
随后对攻击数据采集子系统，告警关联分析子系统和攻击数据生成子系统进行了详细设计和实现。
2
This paper introduces system structure, function and the major part of the subsystem design and implementation, and talks about the datacollection, storage and matching algorithms in detail.
This thesis focuses on the design and implementation of the datacollection and pre-process subsystem, which implement the function of the data retrieve layer and the data pre-process layer.