Evaluation Methods Of Interaction Protection Strategy Effect Based On Security Gateways

The space-earth integrated information network is an important infrastructure of national informationization.In order to ensure the security of the space-earth integrated network,the linkage protection system is introduced.The linkage protection system maintains network security by sending defense strategies to security devices.In the process of network defense,the network defense strategy plays a vital role,and the research and judgment of network defense strategy is related to it.The selection and optimization of the strategy can make us have a clear understanding of the implementation of the strategy.An effective strategy effect evaluation method can supervise and improve thedefense strategy,which is of great significance to network security.Aiming at the problem of judging the effectiveness of defense strategies in the linkageprotection system,the main work of this paper is as follows:(1)Aiming at the problems of traditional network defense strategy research and judgment,such as single index,complete hypothesis or difficult to transplant into linkage protection system,this paper puts forward a method of linkage protection effect research and judgment on the premise of in-depth understanding of linkage protection system.This method combines index system and model construction,and is a research method combining model analysis and experimental verification.Through the establishment of a scientific index system,the strategy is divided into four dimensions,namely,effect dimension,cost dimension,efficiency dimension and income dimension,to achieve a comprehensive defense strategy research and judgment;through the combination of fuzzy mathematics and analytic hierarchy process to quantify the indicators reasonably;through the establishment of income calculation model to solve the quantification of the income dimension,the model is established.The security state diagram reflects the gain of policy execution to the overall security state of the network.Finally,the strategy effect vector is obtained by the method of fuzzy comprehensive evaluation,which can intuitively see the scoring situation of each dimension of the strategy,so as to have a detailed understanding of the implementation of the strategy,and then guide the strategy optimization and strategy selection.(2)Aiming at the problem that expert experience and artificial calculation are needed in the research and evaluation of strategy effect in linkage protection system,an intelligent rule generation model is proposed,which realizes automatic evaluation of strategy effect by mining historical data through classification algorithm.By combining the importance of gateway to fuse data on different network devices,the data set can be obtained,which not only simplifies the attributes of the data set,makes the latter algorithm model more accurate classification,but also makes the data set closer to the actual situation.The algorithm is designed by integrating learning framework to support vector machine as the base classifier.The feasibility and validity of the proposed model and method are analyzed and verified through simulation experiments,which can provide strong technical support for the research and evaluation of defense strategy effect in linkage protection system.