Network security situation prediction method

Abstract

The invention discloses a network security situation prediction method in the technical field of network information security. The method comprises the following steps of: analyzing the hazard degrees of each network security threat by using a grey clustering analysis method, and further constructing a hierarchical network security situation index system, obtaining network security situation values of each time monitoring point, constructing a time sequence, constructing the time sequence into a training sample set, and performing iterative training on the training sample set by utilizing an integrated learning Boosting algorithm to obtain a weak learning machine sequence meeting error requirements; obtaining a strong learning machine by utilizing the method for calculating the weighted sum of the weak learning machine sequence; and finishing predicting the network security situation values of future time monitoring points by using the strong learning machine. The method is relativelyhigher in adaptability and relatively lower in prediction error rate in terms of reduction in network security situation value prediction errors.

Description

technical field [0001] The invention belongs to the technical field of network information security, and in particular relates to a network security situation prediction method. Background technique [0002] With the rapid development of Internet technology, the importance of network security and its impact on society are increasing, and network security issues are becoming more and more prominent, and gradually become an urgent need for further development of the Internet and various network services and applications. key issues. In addition, network intrusions and attacks are developing toward distribution, scale, complexity, and indirection, which will inevitably put forward higher requirements for security product technology, while existing security products (such as IDS, IPS, firewalls, etc.) only It can provide the most basic intrusion detection information, but cannot give a credible forecast warning for the security situation of the future network. Therefore, it is...

AI Technical Summary

Problems solved by technology

[0006] Aiming at the shortcomings of the single learning machine method mentioned in the above background technology, such as large error, prone to overfitting phenomenon, and complicated calculation process, the present invention proposes a network security situation prediction method

Images