Evaluation Model Of The Network Security Situation Based On Indicators Of Integration

Network security situation technology is for the qualitative and quantitative evaluation of network security situation in the current and future period of time, which is a new technology for network security. It is very significant to carry out network security situation technology studies for improving the emergency response capacity of the network system, to alleviate the losses caused by threat, and enhance the resilience of the network.The existing network security measures have solve network security problems in a certain extent, but we cannot grasp the situation of overall network because of lacking information interaction within each other. By the way, traditional network security measures passive solve network problems with passive characteristics, we cannot take the initiative activity to perceive network security situation. In this case, to carry out study of network security posture assessment setup and its construction has high academic value and practical significance.All aspects of network security situation assessment system will be built in-depth research in this essay. First, we establish the network situation indicator system from both dynamic information and static information of the network, which uses the log information, host vulnerability as indicators of the network stability, meanwhile, the real-time network perfonnance information, host running service are treated as dynamic indicators to get the network situation assessment index system. Second, we carry out quantitative assessment of various types of situation indicators respectively by using data mining methods associated with analysis of the log information, and quantify mechanism based on the CVSS vulnerability, which is component to detennine the basis for the theory vulnerability of network situation; quantifying the real time performance data collected by SNMP protocol to meet the real-time requirements of the network security situation; and weight the importance of network hosts based on running services. Finally, we calculate the value of the overall network security situation by integrating various types of situation indicators, and take advantage of the forecast model to predict the future of network security and draw the network security situation map.Finally, the research mentioned above will be applied to the actual network environment. Various types of situation indicators will be quantified, get the value of network security situation, and draw the diagram for the network security situation. After that, we can get a grasp of the overall network security situation, which is the basis for managers to make a network security management strategy.