Research On Security Situation Index System Based On Active And Passive Detection

With the development of Internet,the scale of network is increasing day by day,and various major security problems occur frequently,such as Trojan horse invasion,Wanna-Cry extortion virus,network worm variant virus and personal privacy information disclosure and theft,etc..These threats of network attack put forward urgent needs for the security protection mechanism and timely alarm handling of the entire network system,but such as firewall technology virus detection and supervision system security technology has been unable to meet.Government enterprises and individuals pay more and more attention to network security defense.Network security situation awareness technology is the solution proposed in this paper.Firstly,collect lots of key security data in the network through a variety of active or passive detection technologies,then deal with the security situation indicators through the multilevel security situation indicator system.Then,through the situation assessment and situation prediction method of situation awareness module proposed in this paper,the network security of the whole system can be guaranteed dynamically in real time.Based on the study of a quantity of domestic and foreign literature,this paper focuses on the establishment of situation index system and the research of situation awareness technology.The main achievements are as follows:1.Study and establish multilevel index system.According to the feature extraction of security situation,data fusion and absorption of the existing indicator system,this paper proposes a multilevel indicator system.It includes quantitative evaluation method,mapping method,classification method and situation awareness model based on the index system.2.Aiming at the situation assessment module of situation awareness model,the ACA-Inception-CNN situation assessment method is obtained by combining ant colony algorithm and optimal convolution network.Aiming at the situation prediction module of situation awareness model,this paper obtains the IPSO-RBF situation prediction method by combining particle swarm optimization algorithm and radial basis function network.And the feasibility of situation awareness technology proposed in this paper is verified by experiments...