A Fast Security Cyberspace Situational Awareness Algorithm
Yan Jun Fang · Computer Technology and Development · 2009
In order to calculate network situation,a novel layered cyberspace security situational awareness algorithm is proposed.A value of situational awareness can be calculated either in service level,in node level or in network level by the scheme.The method is used to calculate the degree of changes of flow data,therefore to reflect the security situation.A user judge the abnormal degree either in service level,node level or network level according corresponding situational value.The performance of the algorithm is quit high,so it can be used in online occasion.Although it's difficult to decide the threshold value of network situation,network manager can assistant to choose a proper threshold value according network's real situation.