A method and system for situational awareness including correlation analysis
A technology of situational awareness and correlation analysis, applied in the field of network security, can solve the problems of unable to give quantitative situational assessment reports, limited use value, and unable to predict the security situation
Active Publication Date: 2022-04-12
武汉思普崚技术有限公司
View PDF5 Cites 0 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
[0002] The existing situational awareness technology can obtain the security situation assessment results of the entire system by using a simple situation understanding, but cannot quantitatively give a situation assessment report, let alone predict the security situation based on the situation assessment results. very limited value
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment Construction
[0036] The preferred embodiments of the present invention will be described in detail below in conjunction with the accompanying drawings, so that the advantages and features of the present invention can be more easily understood by those skilled in the art, so as to define the protection scope of the present invention more clearly.
[0037] figure 1 The flow chart of the situational awareness method including correlation analysis provided for this application, the method includes:
[0038] Collect the operating status data of sensors, information platforms, and detection equipment from different sources;
[0039] After receiving the collected data, clear the redundant information in the data, convert the data format into a unified format according to the type of source, divide it into corresponding fields, and merge it into a data stream;
[0040] Extract elements from the merged data stream, discover the behavior, access object, source address, and instantaneous traffic siz...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The present invention provides a situation awareness method and system including correlation analysis, which collects data from different information sources, obtains a data stream in a unified format through preprocessing, extracts high-frequency item group elements from the data stream, and generates high-frequency correlation rules. Send it to the situation assessment for evaluation and quantification. Through the integration with different evaluation systems and fuzzy processing of data elements, the situation value of a single device and a local network can be obtained. Combined with the structure of the entire network, the situation value of the entire system can be obtained. The situation value is imported into the neural network model for prediction, and finally the prediction results are displayed visually, fully evaluating the entire system and each individual device, establishing associations for each device and each layer, performing rule detection for different rules, and calculating risk values, thereby It can scientifically predict the future system and provide users with valuable reference suggestions.
Description
technical field [0001] The present application relates to the technical field of network security, and in particular to a situation awareness method and system including correlation analysis. Background technique [0002] The existing situational awareness technology can obtain the security situation assessment results of the entire system by using a simple situation understanding, but cannot quantitatively give a situation assessment report, let alone predict the security situation based on the situation assessment results. Very limited value. [0003] Situation assessment including correlation analysis not only fully evaluates the entire system and each individual device in terms of algorithms, but also associates it with each device and each layer based on the given situation value, and performs rule detection for different rules , to calculate the risk value, so that the future system can be predicted scientifically, and valuable reference suggestions can be provided fo...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Patents(China)
IPC IPC(8): H04L9/40H04L41/147G06F16/2458G06N3/04G06N3/08
CPCH04L63/1408H04L63/1425H04L63/1433H04L41/147G06F16/2471G06N3/04G06N3/08
Inventor 段彬
Owner 武汉思普崚技术有限公司