Network security situation sensing system and method based on multi-layer multi-angle analysis

Abstract

The invention discloses a network security situation perception system and a method based on multilevel multi-angle analysis, wherein the system comprises a data gathering module, a network security situation understanding module, a network security situation estimation module and a network security situation forecasting module. The method for achieving the network security situation perception system comprises the following steps: firstly, doing statistical data fusion and association analysis to data in the aspects of assets, intimidation and vulnerability of a network system gathered by a sensor, and getting normalized data, secondly, analyzing the normalized data after the fusion of the step one, and doing network security situation special subject estimation, thirdly, doing network security situation factor estimation according to the normalized data obtained in the step one and the estimation result of the step two, fourthly, doing the integral estimation of network security situation according to the estimation result of the step three, fifthly, doing network security situation forecast according to the estimation result of the step D. The invention analyzes the security situation of network from multi levels and multi angles, and guarantees a result perception system to be more accurate and comprehensive.

Description

Technical field [0001] The invention belongs to the field of information security, and relates to a network security situation awareness method based on multi-level and multi-angle analysis. Background technique [0002] The origin of Network Security Situation Awareness (NSSA: Network Security Situation Awareness) and Situation Awareness (SA: Situation Awareness). The concept of situation awareness originated from the study of Human Factors in space flight. The fields of traffic supervision and medical emergency dispatch have been extensively studied. In 1995, Endsley defined situational awareness as the elements of perception in a certain time and space environment, including their current conditions and their future development trends [1]. In 1999, Tim Bass first proposed the concept of network situation awareness, and made an analogy between network situation awareness and air traffic control (ATC: Air Traffic Control) situation awareness, and borrowed the mature theories and...

AI Technical Summary

Problems solved by technology

[0021] The purpose of the present invention is to provide a network security situation awareness system and method based on multi-level and multi-angle analysis, which overcomes the problems of single data source, single output result, and low degree of automation of the perception process in the existing network security situation awareness system, thereby enabling Network security situational awareness is more accurate and comprehensive

Images