A Situational Awareness Method and System for Improved Prediction
A situational awareness and situational technology, applied in the field of network security, can solve problems such as the inability to predict the security situation, the inability to quantitatively give a situation assessment report, and limited use value
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Publication Date
- 2022-04-12
Smart Images

Figure 1 
Figure 2
Abstract
Description
technical field
[0001] The present application relates to the technical field of network security, in particular to a situational awareness method and system for improving prediction. Background technique
[0002] The existing situational awareness technology can obtain the security situation assessment results of the entire system by using a simple situation understanding, but cannot quantitatively give a situation assessment report, let alone predict the security situation based on the situation assessment results. Very limited value. Predictive algorithms need to be introduced to predict quantitative situational awareness.
[0003] The situation assessment of improved prediction not only fully evaluates the entire system and each individual device in terms of algorithms, but also can associate it with each device and each layer based on the given situation value, so that the future system can be scientifically To predict accurately and provide users with valuable refere...
Examples
Embodiment Construction
[0044] The preferred embodiments of the present invention will be described in detail below in conjunction with the accompanying drawings, so that the advantages and features of the present invention can be more easily understood by those skilled in the art, so as to define the protection scope of the present invention more clearly.
[0045] figure 1 A flowchart of a method for improving forecasted situational awareness provided by the present application, the method comprising:
[0046] Collect the operating status data of sensors, information platforms, and detection equipment from different sources;
[0047] After receiving the collected data, clear the redundant information in the data, convert the data format into a unified format according to the type of source, divide it into corresponding fields, and merge it into a data stream;
[0048] Extract the elements from the merged data stream, discover the behavior, access object, source address, and instantaneous traffic size...