A Method Of Network Security Situation Awareness Research With Bayesian Network

Network Security Situation Awareness is a comprehensive protectoral concept,and it is currently a research hotspot for solving network security problems.NSSA can make use of the traditional detection tools to grasp the network security situation from the overall macro perspective,to change the passive defense into active defense,and to analyze the developmental trend of the security state.It can assist the network administrators to monitor the state of the network system,and provide the decision-making basis for the network protection strategy.The main work is as follows:NSSA model is based on multi module information fusion,which is designed and implemented.On the basis of the traditional model,this model refines the NSSA model,and uses the multi module information fusion method to improve the comprehensive judgment of the network system.At the same time,based on the collected multi-source heterogeneous information,it can assess the multi-source heterogeneous information to form a macro network security situation,to construct a visual interface,and to display the risky situation of network security.Based on Bayesian network,this paper also proposes a network security situation assessment method.On the basis of the multi module network security situation awareness model,this method is used to evaluate the situation risk of different modules.By establishing Bayesian network,the Bayesian network is used to analyze the characteristics of uncertain information reasoning,and realize the information fusion.With the combination of the risk assessment results of different modules into the situation of the whole network system,this paper introduces the method of matrix analysis.By analyzing the probability matrix of the multi module Bayesian network,the perception of the network situation is finally formed.Finally,based on the Bayesian network based network security situational awareness method,this paper designs the network security situational awareness system.In the experimental environment,the network attack is used to test.The experimental results show that the model can perceive the network situation and verify the reliability of the model.