Multi-source and multi-dimensional network security situational awareness model
Luqin Lv, Yueming Lu · 2020
Aiming at the problem that single protection technology is difficult to meet the needs of network security, the rationality and accuracy of situation assessment index are poor, the multi-source and multi-dimensional network security situation awareness model and multi-source data association analysis method are proposed. This model combines with data acquisition, data preprocessing, abnormal analysis, security threat assessment and situation visualization. By using Apriori algorithm to mine the relationship between multiple sources of data, the strong rules are filtered out. The experimental results show that the model can accurately perceive known intrusion, unknown threat and its own vulnerability.