A Network Security Situation Analysis Framework Based on Information Fusion
with the rapid development of the Internet, the network structure becomes larger and more complicated and attacking methods are more sophisticated, too. To enhance network security, Network Security Situation Analysis (NSSA) technology is a research hot spot in the network security domain. But at present, the NSSA framework and model which not only analyze the affected results of the network security but also the process how the network security is affected are less. In this paper, a novel NSSA framework is presented. The framework includes two parts: calculate the Network Security Situation Value (NSSV) and discover intrusion processes. NSSA quantitative assesses the impact on network security caused by attacks upon Analytical Hierarchy Process (AHP) and hierarchical network structure. Based . on attack classification, intrusion processes discover the process how network security is affected. At last from the experiments results, NSSV exactly changes as attacks.take place and the accurate intrusion processes are discovered. The applicability of the framework and algorithms are verified.
network security situation Analysis Computer Network Defense AHP attak classification
Songmei Zhang Shan Yao Xinen Ye Chunhe Xia
State Key Laboratory of Virtual Reality Technology and System Beijing Key Laboratory of Network Technology School of Computer Science and Engineering, Beihang University Beijing, China 100191
国际会议
重庆
英文
326-332
2011-08-20（万方平台首次上网日期，不代表论文的发表时间）