Research Of Network Security Situation Evaluation Based On Index System

With the deepening of the process of informatization and rapid development of the Internet, people's work, study and life style is undergoing tremendous change, efficiency has been greatly enhanced, information resources gain the greatest degree of shared, and the network security threats have increased seriously. Despite the intrusion detection system,firewall and other security equipments are widely used,there are so many redundancies and false alarms in the numerous logs that make them cannot satisfy the security monitoring requirements of global network or large-scale network.From a macro perspective, this paper extract the indicators which reflect the security of network from intrusion detection systems and vulnerability scanners and other equipments.Then they are fused and evaluated,and ultimately show the evolution trend of the network security situation in quantified exponential form.The main work content of this paper are as follows:1.In view of the network situation characteristics,we adopt systems analyst ,and contruct a multilayer and dimensionality network situation evaluation index system from the point of view of basic function, vulnerability, threaten and risk.2.The paper analyze tlle data standardization processing method thoroughly, and point out the proper standardized method for each network situation evaluation index,eventually solve the problem of inhomogeneity and unification of the measurement of all kinds of indexs.3.On the basis of the network situation evaluation index system,the paper propose a hiberarchy network situation evaluation algorithm based on fuzzy comprehensive evaluation, complement fuzzy analytic hierarchy proccss for the calculation of evaluation index weights and apply multi-level fuzzy comprehensive evaluation method to assess the security of the network situation.4.Making use of the above-mentioned studying, this paper designed and implemented the network situation evaluation system with other members of the task force together, detailing the design and implementation of the primary module .At the last,the paper verify the veracity of the index system and model through experiments.