Method of security information visualization processing, electronic device and storage medium

An electronic device, comprising:

• at least one processor and at least one memory;
• wherein the at least one memory stores computer-executable instructions;
• and
• the at least one processor executes the computer-executable instructions stored in the at least one memory to enable the processor to execute a method of security information visualization processing, which comprise:
• displaying a security overview dashboard of a user group in response to a security overview display instruction;
• displaying anomaly aggregation information and security measure aggregation information in the security overview dashboard, wherein the anomaly aggregation information comprises anomaly aggregation data respectively corresponding to a plurality of security scenarios;
• wherein the anomaly aggregation data corresponding to each security scenario is obtained based on:
• performing anomaly object identification on a plurality of pieces of log data based on an anomaly identification rule associated with the security scenario, and aggregating anomaly data of obtained anomaly objects;
• the security measure aggregation information comprises information of a plurality of security measures corresponding to the user group and completion information of the plurality of security measures;
• and
• aggregately displaying, in a display region corresponding to the security scenario, information of a plurality of anomaly categories associated with the security scenario, wherein an anomaly category indicated by the anomaly category information is related to the anomaly identification rule.

A non-transitory computer-readable storage medium, wherein the computer-readable storage medium stores computer-executable instructions, and when a processor executes the computer-executable instructions, a method of security information visualization processing is implemented, and the method comprises:

• displaying a security overview dashboard of a user group in response to a security overview display instruction;
• displaying anomaly aggregation information and security measure aggregation information in the security overview dashboard, wherein the anomaly aggregation information comprises anomaly aggregation data respectively corresponding to a plurality of security scenarios;
• wherein the anomaly aggregation data corresponding to each security scenario is obtained based on:
• performing anomaly object identification on a plurality of pieces of log data based on an anomaly identification rule associated with the security scenario, and aggregating anomaly data of obtained anomaly objects;
• the security measure aggregation information comprises information of a plurality of security measures corresponding to the user group and completion information of the plurality of security measures;
• and
• aggregately displaying, in a display region corresponding to the security scenario, information of a plurality of anomaly categories associated with the security scenario, wherein an anomaly category indicated by the anomaly category information is related to the anomaly identification rule.