基于模糊信息融合的网络化系统安全态势评估

Evaluation for Security Situation of Networked Systems Based on Fuzzy Information Fusion

网络化系统安全态势知识的获得不是孤立的,它通过对攻击频率、攻击难易性和攻击严重性等攻击要素的关联和服务、主机、网络3层的态势融合构成了一个复杂的系统工程。通过识别攻击要素间具有相互依赖的关联关系,该文使用模糊信息融合技术对攻击要素进行关联,在服务、主机、网络3个层次使用统计技术完成相应的态势信息融合过程。实验表明,模型可以真实地反映安全态势情况。

Obtaining of security situation of networked systems is not isolated. It is a complex systemic work including association of three attack factors（attack frequency, attack difficulty, attack importance） and data fusion based on service, host and LAN level. By distinguishing interdependent association of attack factors, this paper makes use of fuzzy information fusion to associate the factors. And it also makes use of statistic method on service, host and LAN level to attain situation information. Experiments show that the model can evaluate the security situation effectively.