Method for aggregating security situation of hierarchic network

Abstract

The invention provides a method for aggregating a security situation of a hierarchic network, which is used for calculating a total security situation value of the hierarchic network comprising a plurality of subordinate subnets and master subnets. The method comprises the following steps of: acquiring network security situation values of all the subnets and network security events influencing the network security situation values; determining the distribution degree of each network security event in the hierarchic network according to each acquired hierarchic network event, and determining the influence of all the network security events on a network coordinated attack of the hierarchic network, namely a total coordinated attack factor; and determining the weight of each subnet and the network coordinated attack to the hierarchic network, and calculating the total security situation value of the hierarchic network according to the determined weight, the acquired network security situation values of the subnets and the determined total coordinated attack factor. By the method, the rationality and the accuracy of aggregation of the network security situation can be improved effectively.

Description

technical field [0001] The invention relates to a network security situation assessment method, in particular to a hierarchical network security situation aggregation method. Background technique [0002] With the development of human society, the network has been integrated into all aspects of people's lives. While the network brings great convenience to people, it is also accompanied by security issues that cannot be ignored. The global Internet network is frequently attacked, causing large-scale paralysis of the network. Important information systems At the same time, after the level of network informatization in our country has developed to a certain stage, various network security incidents have become inevitable. The increasingly serious network security incidents, such as network economic crimes, large-scale network attacks , network theft, etc. have become the key factors restricting the development of my country's national economy, and even endangering social stabilit...

AI Technical Summary

Problems solved by technology

For example, the emergence of some cross-subnet coordinated attacks will make the overall network security situation worse, that is to say, it will increase the influence of these coordinated attacks

Images