Research On Key Technology In Network Security Situation Awareness

The traditional network security techniques are experiencing tremendous challenges in the face of increasing severe network security environment. The available net detection device can only make decisions by the limited real-time net information. The restricted resources result in a low early warning quality, as well as the unknown of real-time threat and prediction of net conditions.For the past few years, situation awareness is widely used in air traffic control, nuclear reaction control, military battlefield and other fields, and is also introduced to information security defense technology. The information fusion is utilized to deal with the heterogeneous multi-resource network information. On the condition of the analysis of network threat and security status, it can help the network manager to do the decision-making and predict the future status of network security.In this thesis, the network security situation awareness(NSSA) is basically introduced. By the means of reasonable modeling and NSSA index system, different kinds of information are fused to realize the network security situation evaluation and prediction.Firstly, the basic concepts of NSSA and development situation at home and abroad are presented. On the basis of existing models and combined with Endsley's model, the NSSA system frame model is structured. The Multi-Agent based model owns high self-adaptation ability and expands performance, with it the following key technologies of NSSA is studied.Secondly, the data fusion is used in the feature layer, and the heterogeneous multi-resource information is fused after pretreatment. A feature layer fusion algorithm based on RBF neural network is put forward. The accuracy of data recognition ability is improved.After that, the NSSA index system is constructed. It provides enough theoretical foundation for NSSA description. With the quantitative perception of network security situation, the security problems of network system are settled.In the last, a new evaluation method for network security is proposed on the condition of NSSA model based on grey theoy...