基于机器学习的网络安全态势感知关键技术研究与应用

Research and Application of Key Technologies for Network Security Situational Awareness Based on Machine Learning

随着网络空间安全重要性的不断提高,网络安全态势感知的研究与应用越来越得到关注。网络安全态势感知是一种基于环境的、动态的、整体的洞察安全风险的能力,网络安全态势感知的研究对于提高网络的监控能力、应急响应能力和预测网络安全发展趋势具有重要意义。基于态势感知的概念模型,介绍了网络安全态势感知的关键技术,对比了不同机器学习算法应用于网络安全态势感知的评估与预测效果。

With the increasing importance of cyberspace security,the research and application of cyber security situational awareness is gaining more and more attention.Cyber security situational awareness is an environment-based,dynamic and holistic insight into security risks,and the study of cyber security situational awareness is important for improving network monitoring capability,emergency response capability and predicting network security trends.Based on the conceptual model of situational awareness,the key technologies of network security situational awareness are introduced,and the evaluation and prediction effects of different machine learning algorithms applied to network security situational awareness are compared.