一种基于跨层感知的网络安全态势评估方法

A Network Security Situation Assessment Method Based on Cross-Layer Awareness

本文从跨层感知的概念出发,将网络的多个层面和多个角度的态势信息作为评估工作的数据源,并建立了反映网络各方面态势信息的完整指标体系.采用模糊层次分析法构建了网络不同层次的安全态势模糊一致性判断矩阵,计算各网络层内安全评估指标的权重;对网络态势的评估结果划分了表示网络态势的5个级别;利用D-S证据理论法对网络层内的评估结果进行Dempster组合规则作用,获得网络总体的态势评估结果.整体的跨层评估过程解决了数据源的单一性与片面性,分层评估的方式加快了计算速度,多种评估算法的采用互相弥补了不足,所得结果能比较准确全面地反映网络的态势信息.

In this paper, starting from the concept of cross-layer perception, we treat the security situation information using multiple levels and multiple view angles of networks as source data for assessment, and establish a com- plete metric system of all aspects of network security situation information. Then by use of Fuzzy Analytic Hierarchy Process（FAHP）, a fuzzy consistency judgment matrix is constructed at different levels of the network security situa- tion, and the weight of security metric within each network layer is computed. The results of the assessment of net- work security situation are divided into five levels indicating the security of network. Finally, by the D-S evidence the- ory, Dempster combination rules（DCR） are acted on the assessment results of the network layer, so that we gain the results of security situation assessment of the overall network. The overall cross-layer evaluation process solves the problem of simplicity and the one-sidedness of data source, the hierarchical evaluation way speeds up the calculation, the usage of various assessment algorithm makes up the lack of each other, and the results could present the security situation information of network more accurate and comprehensive.