MLN-based network space security situation prediction method and system

Abstract

The invention discloses an MLN-based network space security situation prediction method and system. The method comprises the steps that asset information data in a specific network space is collected; the collected asset information data is preprocessed, and a network space security situation perception model is constructed and trained; the current network space security situation is evaluated according to the network space security situation perception model and actual data in the current network space; and the future network space security situation is predicted according to a security situation evaluation result of the network space to obtain a security situation prediction result. According to the method, the relation between objects and object properties can be easily represented according to a first-order logic rule by applying a Markov logic network; and in addition, by introducing background knowledge, the object relation in the network space can be mastered more accurately, and then the evaluation accuracy rate is effectively increased. The method and system can be widely applied to the computer network field.

Description

technical field [0001] The invention relates to the technical field of computer networks, in particular to an MLN-based network space security situation prediction method and system. Background technique [0002] With the development of computer and network technology, the scale and complexity of the network continue to increase. In order to cope with increasingly complex network attack methods, it is necessary to fully consider the correlation and dynamics between various security nodes, so as to support more comprehensive security protection. However, some traditional security detection and early warning technologies, such as firewall technology and intrusion detection technology, are limited to a single aspect of protection and lack accurate monitoring of the overall network. In response to this problem, network security situational awareness judges the security status of the system from a macro and global perspective on the basis of integrating massive security data inf...

AI Technical Summary

Problems solved by technology

In existing techniques, logic-based approaches do not address this uncertainty well

In addition, the method based on probabilistic reasoning requires a large number of training samples, the workload is very large, it is difficult to obtain in practice, and the background knowledge of the field cannot be used

Images