基于网络安全态势感知的网络系统自防御体系

NETWORK SYSTEM SELF-DEFENSE SYSTEM BASED ON NETWORK SECURITY SITUATION AWARENESS

网络系统日益庞大,安全问题日益突出。由于网络攻击的规模化、复杂化和间接化的趋势,以及中小型企业和机构在网络系统安全方面意识或者能力不足,企业和机构正蒙受巨大的损失。针对这一现状,提出一种基于网络安全态势感知的自防御体系模型,在该模型的基础上,设计了基于攻击阈值的判定机制和攻击事件分而治之的思想,并给出一种实现架构方案。通过从系统中获得各种所需数据,按照判定机制的规则求得攻击指数,并与攻击阈值比较,进而感知攻击事件的发生。实验验证了自防御体系的判定机制的可行性、简便性。

Network system is becoming increasingly large,and security issues have become increasingly prominent.Due to the large-scale,complex and indirect trend of network attacks,as well as the insufficient ability and lack of awareness of the website system＇s security,minor enterprises and institutions are suffering huge losses. In view of this situation,we present a self-defense system model based on network situational awareness. On the basis of this model,we designed the decision mechanism based on attack threshold,and put forward some idea of solving different attack events with specific methods,and finally proposed a structural implementation scheme. By obtaining required data from system and deducing the attack number according the rule of decision mechanism and comparing with the attack threshold,system senses the happening to some attack events. The experiments verify the feasibility and simplicity of the judgment mechanism of self-defense system.