Research On Publishing And Subscribing Technology Of Network Security Data Resources

Due to the rapid development of Internet technology with mobile Internet as the core,people's dependence on the Internet has gradually deepened,which makes cyberspace security even more important.The flow of network security element information is the basis for improving the ability of network security assurance.The current network security situational awareness field has problems of poor communication of data resources and low efficiency.In order to solve these two problems,this dissertation has carried out three aspects of work.One is to establish a better network security data resource description specification(metadata specification)for the communication of data resource information,so that the communication of data resource information has a unified and standardized basis.The second is to provide a more efficient channel for the circulation of data resource information,and improve the efficiency of data resource information flow through publishing and subscription technology.Finally,a data resource sharing platform was developed,and the above-mentioned metadata specification was applied as a landing practice of the metadata specification,and it provided good scalability support for the metadata specification.In order to establish a metadata specification for cybersecurity data resources,this dissertation starts from the various elements of metadata,examines the technical details of metadata in element selection,coding methods,and evaluation indicators,summarizes the ontology of the field of cybersecurity data resources,and bases on cybersecurity.The element relationship in the research is to semanticize the metadata,and then combine the existing ontology language OWL and encode the metadata specification to support OWL,thereby improving its visibility,accessibility,reusability and interoperability,And it was evaluated,and the evaluation showed that it has good expression ability and moderate difficulty in use.In order to realize the efficient circulation of data resource information,this dissertation studies the existing publish and subscribe technologies,summarizes the design goals of the publish and subscribe system,and analyzes the existing technologies from three aspects: matching algorithm,network topology and routing algorithm.In summary,based on the metadata research work in the previous dissertation,a publication and subscription based on OWL metadata is proposed,and how to express subscriptions,events,and the matching method between the two are discussed in detail.In order to improve the matching speed,the index to speed up the matching is defined,and the index establishment process and the event subscription matching method based on this index are given.The performance and scalability of this method are discussed,and the existing methods are compared.It shows that the method of this dissertation has strong expressive ability,matching performance and horizontal expansion ability meet expectations.The system development combined with the above work has realized a data resource sharing platform.The metadata specification is applied to the data management of the platform,and the scalability of the metadata specification is fully considered,and the function of custom data resource specification is provided externally.The design of the platform takes the long-term consideration into account,fully considers the technological frontier and scalability,and carries out detailed technical analysis and comparison.Finally,a network security data resource sharing platform is realized.The platform has complete basic functions and can serve as the infrastructure to provide the foundation for other work in the subject.