In recent years,with the continuous development of DDoS attacks,DDoS attacks are becoming easier to implement.More and more servers and even personal computers are under the threat of DDoS attacks,especially DDoS flood attacks.Its main purpose is to cause the target host’s TCP/IP protocol layer to become congested.In this paper,we propose a real-time visualization defense framework for DDoS attack.Our framework is based on spark-streaming so that it allows for parallel and distributed traffic analysis that can be deployed at high speed network links.Moreover,this framework includes a cylindrical coordinates Visualization Model,which enables users to recognize DDoS threats promptly and clearly.The experiments show that our framework is able to detect and visualize DDoS flooding attacks timely and efficiently.