一种基于信息融合的安全信息管理模型

A Security Information Management Model Based on Information Fusion

文章针对当前各种网络安全设备独立分散地工作带来的问题提出了一种安全信息管理模型,采用信息融合的概念和方法从误用检测和异常检测两个过程对信息进行处理。最后,利用安全信息关联和融合的结果进行量化的实时安全风险评估。

Most of security equipments work dependently and separately. The administrators are prone to be confused by vast security events. To solve these problems, a security information management model is presented. The model processes information with the techniques of misuse detection and anomaly detection. Finally, a real-time risk evaluation method i~ introduced utilizing the result of information correlation and information fusion.