信息融合背景下的网络安全态势感知模型及关键技术分析

Network Security Situational Awareness Model and Key Technology Analysis Under the Background of Information Fusion

本文基于信息融合构建的网络安全态势感知模型,可通过态势信息的采集、预处理、信息融合与态势评估,超前识别入侵事件,并对入侵事件的发展态势作出准确预测,以便于网络管理员提前采取预防措施,达到防患于未然的效果,维护网络资产设备的安全。在网络安全态势感知与评估中,主要应用到了Hyperic-Sigar态势信息收集技术、NSSAP数据交换技术、决策级数据融合技术以及基于矩阵法的网络安全态势评估技术等关键技术。

In this paper,the network security situation awareness model based on information fusion can identify intrusion events ahead of time and accurately predict the development trend of intrusion events through the collection,preprocessing,information fusion and situation assessment of situation information,so that network administrators can take preventive measures in advance,achieve the effect of prevention,and maintain the security of network assets and equipment.In the network security situation awareness and assessment,Hyperic-Sigar situation information collection technology,NSSAP data exchange technology,decision-level data fusion technology and matrix based network security situation assessment technology are mainly applied.