Distributed situation awareness method and system

Abstract

The invention provides a distributed situation awareness method and a distributed situation awareness system. The method comprises the steps of collecting data of different information sources; obtaining data streams in a unified format through preprocessing; extracting high-frequency project group elements from the data stream; generating high frequency association rules, carrying out situation evaluation for evaluation quantification; carrying out fusion with different evaluation systems; obfuscating the data elements, obtaining situation values of a single device and a local network; combining the architecture composition of the whole network; obtaining a situation value of the whole system; importing the situation values of different levels into a neural network model for prediction; and finally, visually displaying a prediction result, fully evaluating the whole distributed system and each single device, and establishing an association with each device and each layer based on thegiven situation value, thereby scientifically predicting a future system and providing valuable reference suggestions for users.

Description

technical field [0001] The present application relates to the technical field of network security, and in particular, to a distributed situational awareness method and system. Background technique [0002] The existing situational awareness technology uses simple situational understanding to obtain the security situation assessment results of the entire system. It is impossible to quantitatively give a situational assessment report, and it is impossible to predict the security situation based on the results of the situational assessment. The value is very limited. Especially in distributed systems, there is a lack of quantitative analysis in the face of attacks that the balance server may encounter. [0003] Distributed situational assessment not only fully evaluates the entire distributed system and each individual device algorithmically, but also associates it with each device and each layer based on the given situational value, so that future systems can be evaluated. M...

AI Technical Summary

Problems solved by technology

[0002] The existing situational awareness technology can obtain the security situation assessment results of the entire system by using a simple situation understanding, but cannot quantitatively give a situation assessment report, let alone predict the security situation based on the situation assessment results. very limited value

Especially in distributed systems, there is a lack of quantitative analysis in the face of possible attacks on balanced servers

Images