| A scalable model for network situational awareness based on Endsley＇ s situation model |
| |
| 引用本文： | 胡威,Li,Jianhua,Chen,Xiuzhen,Jiang,Xinghao,Zuo,Min.A scalable model for network situational awareness based on Endsley＇ s situation model[J].高技术通讯(英文版),2007,13(4):395-401. |
| |
| 作者姓名： | 胡威 Li Jianhua Chen Xiuzhen Jiang Xinghao Zuo Min |
| |
| 作者单位： | Hu Wei（Department of Electronic Engineering, Shanghai Jiaotong University, Shanghai 200240, P.R.China） ;
Li Jianhua（Department of Electronic Engineering, Shanghai Jiaotong University, Shanghai 200240, P.R.China） ;
Chen Xiuzhen（Department of Electronic Engineering, Shanghai Jiaotong University, Shanghai 200240, P.R.China） ;
Jiang Xinghao（Department of Electronic Engineering, Shanghai Jiaotong University, Shanghai 200240, P.R.China） ;
Zuo Min（Department of Electronic Engineering, Shanghai Jiaotong University, Shanghai 200240, P.R.China） ; |
| |
| 基金项目： | 国家自然科学基金
,
国家高技术研究发展计划(863计划) |
| |
| 摘 要： |
|
| 关 键 词： | 网络位置 资料融合 安全性能 安全管理 |
A scalable model for network situational awareness based on Endsley's situation model |
| |
| Hu Wei,Li Jianhua,Chen Xiuzhen,Jiang Xinghao,Zuo Min.A scalable model for network situational awareness based on Endsley''''s situation model[J].High Technology Letters,2007,13(4):395-401. |
| |
| Authors: | Hu Wei Li Jianhua Chen Xiuzhen Jiang Xinghao Zuo Min |
| |
| Institution: | Department of Electronic Engineering, Shanghai Jiaotong University, Shanghai 200240, P.R.China |
| |
| Abstract: | The paper introduces the Endsley's situation model into network security to describe the network security situation,and improves Endsley'S data processing to suit network alerts.The proposet model contains the information of incident frequency.incident time and incident space.The HoneyNet dataset is selected to evaluate the proposed model in the evaluation.The paper pmposes three definitions to depict and predigest the whole situation extraction in detail.and a fusion component to reduce the influence of alert redundancy on the total security situation.The less complex extraction makes the situation analysismore efficient,and the fine-grained model makes the analysis have a better expansibility.Finally,the situational variation curves are simulated,and the evaluation results prove the situation model applicable and efficient. |
| |
| Keywords: | network situational awareness data fusion security situation security management |
| 本文献已被 维普 万方数据 等数据库收录！ |
|
