网络安全态势感知模型的研究进展

Research Progress in Network Security Situation Awareness Models

针对当前数量形式均不断增多的网络攻击,不同种类名称的网络安全态势感知模型受到学术界的广泛关注研究。在信息技术迅速普及的背景下,硬件系统、软件漏洞日常应用操作的安全漏洞,导致网络攻击的方式手段不断增多,而单一类型的网络安全监控分析工具已难以适用于当前网络技术的发展。文中通过梳理网络安全态势感知技术的研究历史现状,总结分析了态势感知模型的技术理论发展及其工程应用,并且讨论了相关技术方案中存在的缺陷与不足,展望了网络安全态势感知模型未来的研究方向。

In response to the increasing number and forms of network attacks,different types and names of network security situational awareness models have received widespread attention and research from the academic community.In the context of the rapid popularization of information technology,hardware system,software vulnerabilities,and security vulnerabilities in daily application operations have led to an increasing number of ways and means of network attacks.However,a single type of network security monitoring and analysis tool is no longer suitable for the current development of network technology.By reviewing the research history and current status of network security situational awareness technology,this article summarizes and analyzes the theoretical development and engineering applications of situational awareness models,and discusses the shortcomings and deficiencies in relevant technical solutions.It also looks forward to the future research directions of network security situational awareness models.