基于加权均值的多源安全事件评估算法研究

针对多源网络安全事件评估不一致造成的漏警率较高问题,本文提出了一种基于加权均值的评估算法,通过模糊聚类方法对多源安全事件融合,通过加权均值算法得到多源安全事件的网络安全评估指标函数,利用指标函数并根据评估准则对当前网络安全状况进行准确评估.实验证明,这种方法能够有效融合多源安全事件并准确报警.

RESEARCH ON MULTI-SOURCE NETWORK SECURITY EVENTS EVALUATION ALGORITHM BASED ON WEIGHTED MEAN

Against higher leakage alarm rate caused by inconsistent assessment for multiple source network security event,this paper puts forward an evaluation algorithm based on weighted mean,fusion multi-source security incident through the fuzzy clustering method,gets the network security evaluation indicator function for multi-source security incidents by the weighted mean algorithm,and uses the indicator function based on the evaluation criteria to assess the current network security state accurately.Experiments show that the method is effective to fusion multi-source security incident and accurate alarm.