一种自适应的网络安全态势感知系统设计

An Adaptive Cybersecurity Situation Awareness System Design

随着信息化的不断发展,政府、军队、企业等相关信息网络的规模逐渐扩大,重要性日益增加,网络空间面临新的安全挑战。传统安全防御体系能够有效地检测已知的网络威胁,但无法抵御以高级可持续威胁为代表的新型网络攻击。文章阐述了网络安全态势感知的研究现状及自适应安全体系,并给出了自适应的网络安全态势感知的应用模型和系统设计方案。

With the continuous development of informatization, the scale and importance of information networks in government, military, enterprise are gradually expanding, and cyberspace is facing new security challenges. Traditional network security defense system can effectively detect known threats, but it cannot resist unknown network attacks represented by Advanced Persistent Threat(APT). This paper describes the research status of Cybersecurity Situation Awareness(CSA) and the Adaptive Security Architecture(ASA), and gives the design scheme of Adaptive Cybersecurity Situation Awareness system.