Network security data fusion method based on ontology and D-S evidence theory

Abstract

The invention discloses a network security data fusion method based on an ontology and a D-S evidence theory, and belongs to the technical field of network security and data fusion. Ontology modeling is performed on multi-source heterogeneous network security data based on an ontology theory and a domain ontology knowledge base, and a network security knowledge graph is constructed; and data reasoning fusion is realized by using a D-S evidence theory, and the method can solve the problem of knowledge fusion of multi-source heterogeneous data in the field of network security.

Description

technical field [0001] The invention relates to a network security data fusion method based on ontology and D-S evidence theory, and belongs to the technical fields of network security and data fusion. Background technique [0002] The multi-source heterogeneous data collected in the field of network security comes from different network traffic collection devices or security monitoring devices. Differences between devices and systems, as well as between data types themselves, not only lead to data model heterogeneity, but also data semantics. , grammar, etc. also have different degrees of heterogeneity. Since the multi-source heterogeneous data in the field of network security reflects the multi-faceted characteristics of the information source or the monitoring target, it is only possible to observe the security status of the network space as a whole by performing an effective knowledge fusion operation on it. [0003] With the continuous development of various data fusio...

AI Technical Summary

Problems solved by technology

However, the problem of difference in data structure and ambiguity in semantics has not been well resolved

Its shortcoming is that the event-based independence assumption has the problem of focal element explosion, which cannot effectively deal with high-conflict data

Images