一种基于多源异构传感器的网络安全态势感知模型*

为了分析安全事件对网络的影响,准确、全面地评估系统的安全态势,并迅速找出系统中的最薄弱环节,提出一种基于多源异构传感器的网络安全态势评估模型。首先,运用改进的DS融合规则结合AHP算法对多传感器提交的安全数据进行初步融合;然后,针对可能造成的漏报问题,配合预定义的安全策略进行全局融合,得到整个网络当前的安全态势。通过对实验网络的分析表明,提出的方法符合实际应用,评估结果准确、有效,有助于更好地调整系统安全策略。

Novel multi-heterogeneous sensor based network security situation awareness model

In order to analyze the influence of security incidents on a network system and accurately evaluate system security, this paper proposed a new network security situation awareness model based on multi-heterogeneous sensors. Firstly, by using improved DS fusion rules and combining with AHP algorithm, it fused security data submitted from different sources. Secondly, to deal with the potential missing report problem, it performed global fusion using predefined security policy so as to get the current security situation of the whole network. The evaluation of a simulated network indicates that this approach is suitable for real network environment, and the evaluation result is precise and efficient.