基于移动Agent的网络安全态势感知模型

Model of Network Security Situational Awareness Based on Mobile Agent

针对现有框架模型存在数据源单一或多源同质、响应延迟大、自我保护性差、稳定性和容错能力差等缺点,借助移动Agent的优点,提出一种网络安全态势感知系统框架模型。该框架结构自下而上依次分为信息获取层、数据预处理层、态势决策层,建立了一个系统化、动态化、分布式、自适应的网络安全态势框架结构。利用PEPA形式化建模语言对框架模型进行分析,验证了框架模型的合理性。

considering the drawbacks of existed architecture such as single data source or multi-source with homogeneous data,long response delay,weak self-protection and lack of fault tolerance,a heterogeneous data source-oriented network security situation awareness system architecture based on mobile agents is studied.This architecture can be divided into information access layer,data preprocessing layer and situation decision layer.Every module in these three layers has been designed carefully and a systematic,dynamic,distributed and self-adapted NSSA architecture is built as last.The architecture is analyzed based on the formal modeling language PEPA.And then the rationality of this model is validated.