计算机工程与应用2011,Vol.47Issue(28):106-109,4.DOI:10.3778/j.issn.1002-8331.2011.28.029
引入交叉确认机制的安全态势评估模型
Assessment model of security situation introduced cross-validation mechanism
摘要
Abstract
According to the fact that the data sources of the network security situation assessment are one-sided and the results are not accurate and other issues, this paper proposes a method of network security situation assessment based on cross-validation.On the basis of the correlation of network security events and the uncertainty of alarm information, a kind of cross-validation mechanism on multi-source warnings is presented.Thus,a large amount of data from multi-source warnings are identified and confirmed by the mechanism with fuzzy reasoning, and then the situation assessment is implemented on the basis of the extract accurate and tidy attack information with combining static assessment data.An example of actual network is given to validate the method.The results show that this method is more effective and accurate than the existing methods.关键词
态势评估/交叉确认/模糊论域/模糊推理Key words
situation assessment/cross-validation/fuzzy domain/fuzzy reasoning分类
信息技术与安全科学引用本文复制引用
吴志刚,苏安婕,王文奇..引入交叉确认机制的安全态势评估模型[J].计算机工程与应用,2011,47(28):106-109,4.基金项目
河南省教育厅自然科学研究基金(No.2011 A520049) (No.2011 A520049)
河南省科技攻关计划项目(No.082102210082). (No.082102210082)