Network Security Situation Awareness Assessment Model Based On Rough Set

There is rapid pace of development of the network, and weaknesses in the network, means of attack variations and a variety of automated attack tools have emerged, the current variety of network intrusion over the rising trend, network security incidents prone to happen. Network security situation awareness at large-scale network environments can be from high-level comprehensive perspective to monitor system of the state of network security and take on important tasks with complex network environment. Network security situational awareness are hot spots in the research fields, which play a key role in accelerating the pace of disaster response, improve ability to resist, harm reduction loss and other places.Network security situation awareness systems can be divided as follows, namely to obtain security information phase, to understand the situation phase, assess the situation stage, visualize and prospects stage and so on. The purpose of this paper is to study the scanning system, realize network security by analyzing the results of the system with scanning situational awareness assessment model, using rough set theory that objectively determine the degree of importance, thus improving network security assessment with objectivity and accuracy. Network security administrators can full use of the vulnerability of the system to be timely detection of network security evaluation model based on rough set, and take appropriate measures to eventually reach the purpose of sustainable development of the network system.My paper’s main work, firstly for technology projects involved include the address block randomization scan tasks, distributed port scan do not maintain the connection status, quickly scan, checksum response packet, identify vulnerabilities, and the associated stack fingerprinting technology. The high speed and efficiency regional network scanning system can be competent regional and even global network scan tasks. The system uses a distributed architecture that can generate scanning strategy based on demand scan tasks and task distribution to multiple terminals to perform, by scanning networks, to understand vulnerabilities configuration and operation of applications and services, for assessment on the situation objectively. This paper considers the use of rough set and then under incomplete system approach for network elements in order to understand and evaluate, establish network security situation based on the perception of RST model under incomplete information system, through the attributes reduction and attribute values for quantitative classification, getting values of the security situation to realize assessment.