Network Security Evaluation Method Research On Information Fusion

Facing the current increasingly serious network security situation, traditional technologies of network security, for example, firewall, intrusion detection system, can not meet the demand of network security. And network manager is unable to attain threat degree of network attack and correlated information of network security situation. Consequently, network manager is hard to make the corresponding decision. In order to meet a higher demand of network application in safety area, active network security defendable mean-technology of network security situation evaluation has become a hot topic in network security..This paper arms at evaluation means of current technology of network security evaluation. It analyses their characteristics and disadvantages of each other. Through learning from the DFS chairman F. White's famous and classical model of data fusing, a new model of network security evaluation applying information fusion is presented, in a position to deal with security information effectively from multiple sensors. Information fusion center afford three levels of data fusion that realizes information filtration, correlation and fusion. It settles the problems of information explode and correlation. It describes fuzzy information fusion arithmetic and Bayes network arithmetic. Combining with the relationship between vulnerability and vulnerability and the relationship between vulnerability and attack, Bayes network arithmetic is improved in this paper.After analyzing the characteristic of network system framework in current, a network system hierarchical situation fusion model is set up from the view of situation evaluation. Network manager can make the security situation evaluation basing on the relationship between attacks. It is able to reflect the problem caused from vulnerabilities factually. And it can help network manager to take relevant measure in time. In the finally, it researches the quantitative calculation of security situation index of service level, host level and network level.