Network security situation awareness based on network simulation
Songsong Lu, Xiaofeng Wang, Li Mao · 2014
Network security situation awareness is a comprehensive technology which can obtain and process the information of security, and it plays an important role in the field of network security. As the traditional network security situation awareness methods mainly forecast the situation value based on mathematical models, which will result in the ignorance of the dynamic changes of network security situation elements, this paper presents a method of network security situation awareness based on network simulation. This method firstly constructs various simulation elements models; secondly it constructs a network security situation awareness simulation scenario based on these constructed models; thirdly it uses abstract packet-forwarding method to quickly infer network security behaviors in simulation scenario meanwhile recording important log information; finally it evaluates the value of network security situation based on the log information and forecasts the network security situation. Experiment proves that this method can reduce the network security stimulation time effectively and evaluate the network security situation value accurately.