Computer Network Defense Decision System

Abstract

A computer network defense (CND) decision-making system comprises a decomposition module of defense intention, a generating module of a defense mission, and a generating module and a CND decision-making information bank of a defense scheme. The CND decision-making system is a process of preparing the defense scheme according to the defense intension and a situation, firstly solves the problem that the computer network defense lacks high layer defense intension describing, solves the problem of a decision-making method based on the defense intension on the basis of solving the problem of lacking high layer defense intension describing, achieves a formalized computer network defense intension describing language (CNDIDL), provides a computer network defense decision-making method based on model mapping, automatically converts the defense intension into the defense scheme based on situation information and a defined model mapping rule, and therefore, provides automatic and high-efficiency defense decision-making technology for wide-range network security defense.

Description

technical field [0001] The invention belongs to the technical field of computer network security, designs and implements a computer network defense decision-making system, provides a high-level defense attempt description language, combines the network situation, automatically converts the defense attempt into a defense plan, and is the basis of the defense plan Automatic generation provides technical means. Background technique [0002] Computer network defense refers to a series of protection (Protect), monitoring (Monitor), analysis (Analyze), detection (Detect) and response (Respond) unauthorized activities within the computer network and its information system. With the diversification of network attack methods, in the ever-changing network environment, it poses greater challenges to computer network defense. In order to ensure the security of large-scale computer networks and their application systems, it is necessary to automatically make decisions and deploy various...

AI Technical Summary

Problems solved by technology

[0003] (1) The existing computer network defense decision is a passive decision based on the situation, without considering the defender's subjective defense attempt, so the adjustment and correction of the defense plan cannot be based on the defense attempt, resulting in the defense plan not being able to target the Defense targets are protected, reducing the efficiency of defense

[0004] (2) Machines cannot be made to accept human subjective wishes in a more appropriate form, so that human beings who are good at image thinking can concentrate on premeditating higher-level defensive intentions, thereby freeing human beings from low-level machine behaviors

High-level description methods that lack defensive attempts

Images