基于贝叶斯网络的网络安全态势评估方法研究

针对当前网络安全评估系统不能提供有用态势信息的缺陷,提出了一种新的网络安全态势评估方法。将贝叶斯网络应用于网络安全态势评估中,根据多树型网络推理,利用贝叶斯网络的图形结构,提出了由点到面、自下向上相互影响的多元化安全态势评估模型。并将网络及主机工具采集的信息作为事件节点的证据来更新态势节点的概率,并反过来影响事件节点的概率,从而预测网络安全态势。

Network Security Situation Assessment Method Research Based on Bayesian Net

Aiming at the deficiency that is unable to provide useful security situation information encountered in the current security evaluation system,his paper presents a novel method to evaluate network security situation assessment.It applies Bayesian net to the network security situation assessment,and uses its structure of graph to adopt the evaluation policy from point to plain and from bottom to top.The messages gathered by network and toll are taken as the evidence of node to update the probability of the situation node and in turn,and eventually forecast the network security situation.