Study On Network Security Situational Awareness For CAPF

The network of the China Armed Police Force (CAPF) is an automatic office system, which is based on computer network technology. It covers all CAPF units and integrates a variety of applications. CAPF achieves the sharing of resources located in different units and improves the ability of real-time communication between units through the network. However, as the continuous evolution of network threats, information security is one of the bottlenecks which requires full consideration in order to keep development of the CAPF Network.Recently, Network Security Situational Awareness (NSSA) is a hot topic which attracts many researchers'attention. NSSA monitors security state of large network from the global view. By fusing and analyzing the multi-source security data, NSSA generates concise and easy-understanding indexes to show the network security situation. With the security development of the CAPF network as the research background, this paper focuses on the key technique and application of NSSA in CAPF network. Main contributions are as follows:1. Based on studying the techniques of NSSA and comprehensively analyzing the characteristics of network topology and applications, the CAPF-NSSA system architecture is designed. This architecture can satisfy the demand of CAPF network in security construction.2. According to the CAPF-NSSA system architecture and the principle of index, comprehensively analyzing the sources of the index data in CAPF network, the index system of NSSA has been built, in which the security situation of the CAPF network is described mainly from three aspects of stability, threatening and vulnerability.3. An algorithm has been designed to quantitate the threatening indexes and vulnerability indexes. This algorithm uses the hierarchical idea which quantitates the indexes from bottom to top and from local to global, and it combines with correction method of performance parameters to optimize the results.4. A prototype system of CAPF-NSSA was designed, and realized the mainly function modules that contained situational data acquisition, device management and situational quantization. At last, the simulant test has been done, and the results showed that the CAPF-NSSA architecture and index quantitative algorithm were feasibility.The study of NSSA in this paper is closely combined to the CAPF network. It could provide useful decision support and give some technical suggestions for the development of information security in CAPF network.