基于层次化网络的多源头威胁态势高效评估方法

An Efficient Evaluation Method for Multiple-source Threat Situation Based on Hierarchical Network

为了解决当前网络空间评估方法存在识别的攻击种类不详细,评估结果误差较大的问题。提出一种层次化网络多源头威胁态势高效评估方法。首先,构建层次化网络多源头威胁态势评估模型;然后,融合证据理论获取网络遭受每次攻击的威胁态势级别对应的BPA函数,计算层次化网络各层次的多源头威胁级别;最后,根据结果计算网络关键层的多源头威胁态势指数,实现层次化网络多源头威胁态势高效评估。实验结果表明,所提方法评估层次化网络多源头威胁态势精确度均值高达97. 0%,平均用时仅为4. 9s。与其他方法相比,精确度和检测效率方面表现更优。

In order to solve the problem that the type of attack identified by the current cyberspace assessment method is not detailed,the error of the evaluation result is large.An efficient evaluation method for multi-source threat situation in hierarchical network is proposed.Construct a hierarchical network multi-source threat situation assessment model,integrate evidence theory to obtain the BPA function corresponding to the threat situation level of each attack,calculate the multi-source threat level of each level of the hierarchical network,and calculate the multi-source of the network key layer according to the result.Threat situation index to achieve efficient evaluation of multi-source threat situation in hierarchical networks.The experimental results show that the proposed method evaluates the multi-source threat situation accuracy of hierarchical network up to 97.0%.Compared with other methods,the performance of accuracy and detection efficiency is much better.