A Layered Security Situational Awareness Algorithm Based on Flow Data
Guicheng Shen · Microcomputer Information · 2008
A layered cyberspace security situational awareness scheme based on flow data is proposed. A value of situational awareness can be calculated either in service level, in node level or in network level by the scheme. The method is used to calculate the degree of changes of flow data to reflect the security situation, by which user can judge the abnormal degree either in service level, node level or network level according to corresponding situational value.