Research On Network Security Situation Awareness Based On Rough Set Theory

The Internet has become a symbol of modern society, to people’s daily life, national defense, science and technology development brings endless benefits. At the same time, with the complex factors of the network, network security incidents occur frequently, and show the characteristics of purpose, organization, etc.. The old defense technology is too passive and single, it is difficult to adapt to the complex environment changes. Situational awareness as a new type of active defense technology, can fully and timely grasp the current network security situation, and to predict the future trend of development.In the sense of security situation, there are some problems, such as high redundancy, low weight distribution and low accuracy of traditional method. In this paper, we make use of the advantages of rough set theory to make up for, and the application of rough set theory in situation awareness correction and improvement. Specific research contents are as follows:Firstly, index System changes affect network security posture, and by virtue of the unique features of rough set theory in data mining to the reduction of redundant indicators, screening momentum factor.Secondly, aiming at the problem that the weight distribution of the perception study is easy to appear, this paper puts forward a new method of network security situation assessment based on the comprehensive weighted. Through experiments, the method can effectively improve the distribution of the index weight and improve the accuracy of the results.Thirdly, we propose a method of situation prediction based on RS-BPNN, and transform the essence of rough set theory into the method of constructing neural network. By comparing the experimental results,this method has fully integrated the advantages of rough set theory and neural network, and improves the forecasting ability of the situation development.