Research On Assessment And Prediction Method Of Network Security Situation

In traditional network management,the work of each network sensor is independent of each other which only solve a relatively single network security problem.In this context,it is essential to evaluate and predict the status of network security,comprehensively and accurately,so that network managers can make correct judgments,and therefore need to use network security situation awareness technology.Based on the research and analysis of current network security situation assessment and network security situation prediction technology,this paper proposes a network security situation assessment model based on Renyi cross entropy and CVSS,also proposes a network security situation prediction model based on hidden Markov model.Firstly,this paper proposes a network security situation assessment model based on the three modules of network traffic assessment,network threat assessment,and network vulnerability assessment,to evaluate network security more accurately.Secondly,it is found from the research that the hidden Markov model is a random process about the relationship between observable variables and hidden variables,which has a great similarity compared with the internal and external states of the security situation system.After that,this paper proposes a network security situation prediction model based on hidden Markov model,introducing the concept of fixed Kmeans into the hidden Markov model to determine initial points in the model.The experiments results show that it can present a more accurate network security situation assessment result,after considering the scores of traffic assessment,threat assessment and vulnerability assessment.At the same time,based on the results of the situation assessment,experimental verification of the proposed network security situation prediction model is performed,which proves that the model can predict the network security situation more accurately.