In　order　to　help　network　managers　better　grasp　the　situation　of　network　security,　and　timely　respond　to　major　network　security　incidents,　as　well　as　reduce　the　loss　of　network　attacks　bring　to　the　target　network,　network　security　situation　analysis　system　has　been　studied　and　the　overall　design　is　proposed,　whose　logical　and　physical　structure　has　been　designed　in　detail.　At　the　same　time,　for　the　purpose　of　meet　the　application　requirements,　a　cascade　distributed　deployment　module　is　proposed,　which　would　laid　a　solid　foundation　for　the　promotion　and　application　for　the　system.