Cloud method of multi-granularity network security situation analysis
Jia Chen · Journal of Computer Applications · 2009
This paper employs the uncertainty reasoning method in the Cloud Theory to solve the problem of network security perception.On the basis of the analysis of the existing models for security evaluation and their key technologies,the author proposed a situation awareness model using the knowledge base as well as the multi-granularity method.This model has three advantages over the conventional evaluation mechanisms:the dynamic updated knowledge base,multi-granularity method for security representation and visualization of the whole situation offers higher rate in accuracy and lower information redundancy.In addition,an extended cloud reasoning algorithm was designed and implemented to get both the qualitative and quantitative results of the monitored network and thus offers a more perceptible and scalable security situation.At last,experiments are done on the campus network of Wuhan University,and the results indicate that the feasibility and efficiency of our design.