基于本体的自适应智能安全防护体系研究

An Ontology-based Framework for Adaptive Intelligent Security Protection System

笔者提出了基于本体自适应情景感知系统为核心的智能安全防护体系通用框架。通过将新的通用框架应用于资产安全防护中,如命令执行漏洞的自动发现和防护,可实时感知网络安全状况,实现对科技资产漏洞风险的实时评估,并及时发现网络中针对科技资产攻击的异常事件,缩短了阻断响应的时间,提高了防护效率,并降低漏洞攻击的误报率,降低了网络阻塞的风险。

In this paper, We propose a common intelligent security protection system framework which is based on an ontology-based adaptive context-aware system. We apply the new common framework to the asset security protection, to verify our proposition. In this scenario,our common intelligent security protection system framework can realize automatically discovery and protection of command execution vulnerabilities, perceive the security status of the network and make assessment of the risk of technology asset vulnerabilities and discover the abnormal attack events for the technology asset in the cyberspace in real-time.It can shorten the response time to block the attack, improve the protection efficiency, reduce the false alarm rate of the vulnerability attack and the risk of network congestion.