SVM和攻防树在信息安全态势评估中的应用

Application of Support Vector Machine(SVM)and attack defense tree model in information security situation assessment

为了增强企业信息安全性,促进我国信息安全发展,文中提出了基于支持向量机(Support Vector Machine,SVM)和攻防树的信息安全态势评估算法。利用SVM进行信息安全事件的关联分析,此后利用攻防树模型对预处理后的数据进行安全态势评估。结果显示,文中提出的安全态势评估方法在对数据库进行评估时,最低的准确率都能够达到91.7%。也就表明,SVM和攻防树模型在信息安全态势评估中是有效的,并且具有较大的优势。

In order to enhance the information security of Chinese enterprises and promote the development of information security in China,an information security situation assessment algorithm based on Support Vector Machine(SVM)and attack defense tree model is proposed.The SVM is used to analyze the correlation of information security events,and then the attack defense tree model is used to evaluate the security situation of the preprocessed data.The results show that the lowest accuracy of the proposed security situation assessment method in evaluating the database can reach 91.7%,which shows that the SVM and attack defense tree model are effective and have great advantages in information security situation assessment.