基于关联规则挖掘的关键基础设施安全事件分析

Analysis of Critical Infrastructure Reports Based on Association Rules Mining

在计算机技术迅猛发展和网络技术逐步普及的今天,信息技术已经渗入了社会的各个领域,关键基础设施作为现代社会得以正常运转的支撑体系,对信息技术的依赖不断加深,但由于网络的互联性与交互性,使得关键基础设施正面临着越来越严峻的安全威胁。如何进行关键基础设施保护成为亟待解决的问题。文中基于开源渠道获得涉及关键基础设施保护的安全事件,利用数据挖掘中关联规则分析的方法,通过对事件相关属性(如事件的类型、发生的途径、时间、造成的伤害、涉及人员及影响范围等)进行关联挖掘,分析各因素之间的潜在联系,最终生成强联系规则数据库,作为可辅助决策的知识信息,以帮助对关键基础设施进行有针对性的保护和对安全事件的预测防范。

With the rapid development of computer and network technology, information technology has infiltrated all areas of society. Critical infrastructure, as a supporting system to make modem society function normal,is increasingly dependent on information technolo- gy. However, due to the connectivity and interactivity of network, critical infrastructure is facing the increasingly severe dangers. How to protect the critical infrastructure has become an urgent problem. In this paper,the data mining technology including the association rules mining is applied. Analyze the critical infrastructure reports from open sources, mine the hidden relationships among data to identify the relationship between the key elements in the reports and form the database of strong association rules. The database of strong association rules can help professinals make decisions on how to protect the critical infrastructure pertinently and forecast security incidents.