Misdeclaration self-adapting network safety situation predication method

Abstract

The invention relates to a misdeclaration self-adapting network safety situation predication method, comprising the following steps: (1) extracting alarm events in a safety protection software; (2) eliminating misdeclaration in the alarm events based on a system host and network abnormal information to form an exact training sample set; (3) training the sample set by using a neutral network learning algorithm to build a predication model; (4) performing on-line predication and confirming the predication result; (5) if the predication result is misdeclaration, marking the current predication event sequence to be negative example, implementing increment neutral network learning and adjusting the predication model. By utilizing the method, the problems that too much many misdeclaration exist in the network safety situation predication and cannot be eliminated automatically are solved, the network safety situation predication model training sample set is built exactly, the predication model is built effectively, the predication result is confirmed automatically to eliminate the misdeclaration and adjust the predication model automatically, the number of misdeclaration generated in subsequent predication is reduced, and the reliability and practicability of the method are enhanced.

Description

technical field [0001] The invention relates to a network security method of a computer network, in particular to a false alarm self-adaptive network security situation prediction method. Background technique [0002] With the rapid development of information technologies such as computers and communications, the Internet has become increasingly popular around the world in all aspects of people's work, study and life. By the end of 2013, the Internet had covered nearly 40% of the world's population, and the number of users had reached 2.7 billion. In China, the number of Internet users has also grown rapidly to 618 million. Its applications are also growing rapidly, among which the development of e-commerce and social networking has further promoted the prosperity of the Internet. However, with the wide application of the Internet, its security issues are becoming increasingly prominent. Driven by the pursuit of interests, revenge, and destruction, network attackers and ha...

AI Technical Summary

Problems solved by technology

What's more, if a large number of false alarms (false alarms) are generated for a long time, network administrators will ignore the alarm information generated by the prediction model, and the prediction of network security situation will lose the meaning of existence

Images