DS融合知识的网络安全态势评估及验证

Assessment and Validation of Network Security Situation Based on DS and Knowledge Fusion

网络安全态势评估过程具有大量不确定性的复杂影响因素。针对态势评估中存在的正确性和合理性质疑等问题,利用DS证据理论建立了态势指标的识别空间和评估准则,通过专家知识融合的推理,提出了基于DS融合知识的网络安全态势评估方法,同时结合三层网络主机脆弱性指数的计算实验对态势评估的分析实例进行了验证。实验结果表明,该方法具有较好的态势评估效果,为态势评估提供了一种可行的解决方案。

Network security situation assessment process has a large number of complex and uncertain influence factors.Aiming at the problem of lack of correctness and rationality in situation assessment,the situation index identification space and evaluation criteria based on the DS evidential theory were set up.The network situation assessment method based on DS and Knowledge Fusion was proposed through expert knowledge fusion reasoning,and the situation assessment case analysis was verified,combining the computation of three-layer network host vulnerability index.Experimental results show that the method has good effect in situation assessment,and thus provides a feasible solution for situation assessment.