Research on Real-time Network Security Situation Assessment Based on Rough Set
WU Chao-xion · 2015
Aiming at the problem of the accuracy and real-time of situation assessment,a real-time network security situation assessment based on rough set method was proposed.It acquires high-quality rule sets from multi-sample through rough set theory,and generates multi-level rule trees,then integrates rule into real-time attack awareness engine to achieve online analysis and detection of dynamic data stream at the same time.And the result as the evidence of situation assessment is used to compute the value of situation in whole network according to the model of situation assessment at last.The method improves the assessment on accurate,real-time,objective sufficiently by experiments.