Network Security Situation Awareness Model Based on Heterogeneous Multi-sensor Fusion
Jibao Lai · 2008
Network Security Situation Awareness(NSSA) is a hot research spot in the area of network security and it is significant to study NSSA in order to improve the security level of our nation.This paper presents a NSSA model based on data fusion.The NSSA model employs multi-layer feedforward neural network as its fusion engine and fuses the data provided by the sensors in an intelligent and efficient manner.Furthermore,this paper discusses a network security situation generation agorithm which expresses the security situation by the weighted quantization of security events.In addition,it also designs a feature reduction method in order to improve the real-time nature of the NSSA.Our model and approach are proved to be feasible and effective through a series experiments using real network traffic.