基于多源多层次信息融合的网络安全态势感知方法

针对网络安全态势感知范围局限、信息来源单一及准确性偏差较大的问题,提出了一个全方位整体上感知网络安全态势框架.充分考虑多信息源和多层次信息融合,从3个维度上动态生成网络当前安全状况,准确地反映网络当前安全态势,易于逆向查找异常组件.提出"3σ法则"离散化连续型随机变量方法,对建立适合处理非确定性信息融合的贝叶斯网模型有重要的理论与实践指导意义.最后,利用网络实例数据,对该模型和算法进行了验证,结果表明了该方法的正确性.

Network Security Situation Awareness Method Based on Multi-Source and Multi-Level Information Fusion

Abstract： A comprehensive overall network security situation awareness framework was proposed, fully considering mul-information sources and multi level information fusion, which can dynamically produce the current network security situation from the three dimensions, accurately reflect the current network security situation, and easily find the abnormal component. Besides, a “3σ rule” to discretize continuous random variable was proposed that can establish a Bayesian network suitable for dealing with uncertain information fusion, providing important guidance to theory and practice. Making full use of network instance data, the model and algorithm are verified and the results show that the method is correct.