Network security situation assessment model based on time parameter
Hong Zhang · Jisuanji yingyong yanjiu · 2012
For resolving the problem that due to the lack of consideration of time-varying of data sources,the existing network security situation assessment usually failed to make the source of evidence reliable enough and error existed in the assessment results,this paper introduced the time-varying function to describe the time-varying multi-source evidence.It proposed the time-varying D-S evidence theory to improve the reliability of the evidence.The occurrence probability of the threat was obtained by using the improved time-varying D-S evidence theory to multi-sensor fusion of the evidence.On this basis,it proposed the hierarchical model with time parameter.Finally it gave an example of the actual network datasets to valiadate the network security situa-tion awareness model.The results of the experimental comparison show that this model is more in line with the actual situation.