构建广义立方体感知网络安全态势

Constructing general cube to be aware of network security situation

针对大多方法感知范围局限、信息来源单一、空间时间复杂性高及准确性偏差较大等问题,提出了分层感知模型与构建广义立方体感知网络安全态势的方法.将监测到的连续型态势因子数据经"3σ法则"离散化预处理后,聚合在所构建的广义立方体格中,纵向上融合成组件的安全态势,横向上对组件安全态势采用统计的方法融合成网络的安全态势,为增强网络安全性提供可靠的参照依据.利用网络实例数据对所提出的网络安全态势感知模型和算法进行验证,表明了该方法的正确性.

Concerning the problems of limited current network security situation assessment scope, single information source, higher time and space complexity and larger deviation of the accuracy, a method was put forward to construct general cube, which can be aware of the network security situation. The continuous situa- tion factor data monitored can be pretreated by discretizing by ＂3o＂ rule＂ and aggregated in the general built cube, that fused into component security situation vertically and merged into the network security situation from component security situation using statistical methods horizontally. It can provide reliable reference to enhance network security. Finally, making full use of network data, the network security situation awareness model and algorithm proposed are verified and the experimental results show correctness of this method.