Network safety situation evaluation method and device

Abstract

The invention discloses a network safety situation evaluation method and device, and the method comprises the steps that a network information obtaining module detects the change of IP address statesof network traffic flow of new and old users in a network through an IP address database so as to obtain a risk value of the network, and calculates a risk index of each node of the network by using the risk value; a fusion situation information module integrates the risk indexes of all nodes of the network, generates an integration risk index of the network, and uses the fuzzy C-mean clustering algorithm to divide the integration risk index into five security levels; a network situation evaluation module generates the safety situation of the network according to integration risk index of thenetwork through combining with different security levels. The method provided by the invention not only realizes the safety security situation evaluation of a DDoS attack in a big data environment, but also effectively improves the flexibility of the network safety situation evaluation method and the accuracy of the evaluation result.

Description

technical field [0001] The invention relates to the technical field of the Internet, in particular to a network security situation assessment method and device. Background technique [0002] With the rapid development of Internet technology and the advent of the era of big data, the threat of distributed denial of service attacks (Distributed Denial of Service, DDoS) to network security has become a major problem that needs to be solved urgently in the Internet environment. In order to help network managers have a clear and comprehensive understanding of the network security situation under supervision, it is necessary to evaluate the security situation of the network. The existing network security situation assessment methods mainly include: network situation awareness and assessment model based on fuzzy dynamic Bayesian network, hierarchical network threat situation assessment method based on Dempster / Shafer (D-S) evidence theory, and hidden Margin Cove model network secu...

AI Technical Summary

Problems solved by technology

Therefore, the existing network security situation assessment methods are not only not flexible enough, and the assessment results are not accurate enough, but also not suitable for the security situation assessment of the network attacked by DDoS in the big data environment.

Images