摘要
网络安全态势预测是网络安全态势感知重要环节,通过对网络安全态势进行准确预测,可以主动预防、遏制大规模网络威胁事件的发生,最大限度降低网络威胁事件的危害,因而是网络安全主动防御的核心技术之一,对于提升网络安全性能具有重要意义。学术界对该问题的关注历来已久,且随着其他学科相关技术的持续发展,该问题的相关研究也越来越具有生命力。深入分析了当前的网络安全态势预测技术,从相关方法的共性特征、评估方案等方面进行介绍,进而提升对该领域的认识。
Network security situation projection is an important step of network security situation awareness.By accurately predicting the network security situation,it is possible to proactively prevent and contain large-scale network threat events and minimize the harm of network threat events.Therefore,it is one of the key techniques for active defense of network security,which is of great significance for improving network security performance.Researchers have paid much attention on this problem for a long time,and as relevant technologies have developed in other fields,it becomes more attractive than ever before.This paper analyses the state-of-art literals of network security projection,summarizes the common characteristics and evaluation methods of the proposed methods.It aims to offer a comprehensive understanding of the state-ofart techniques.
作者
张志勇
张文博
杨慧
李明桂
刘方
徐锐
ZHANG Zhi-yong;ZHANG Wen-bo;Yang Hui;LI Ming-gui;LIU Fang;XU Rui(Cyberspace Security Key Laboratory of Sichuan Province,Chengdu Sichuan 610041,China;China Electronic Technology Cyber Security Co.,Ltd.,Chengdu Sichuan 610041,China)
出处
《通信技术》
2019年第7期1713-1721,共9页
Communications Technology
基金
四川省应用基础研究项目(No.2018JY0379)
国家科技部重点研发计划(No.2016YFB0801302)~~
关键词
攻击行为预测
攻击意图识别
入侵预警
网络安全态势预测
attack behavior projection
attack intension identification
intrusion prediction
network security situation forecasting