Research on Network Security Situation Assessment Technology Based on Correlation Analysis
Wenyong Du, Chenfei Wang, Wei Hong Han, Ziqian Li · 2023
The network security situation assessment technology is a new network information security solution proposed for the increasingly complex network. The network security state can accurately and real-time reflect the current security situation of the network, greatly facilitating administrators to grasp the network security situation. This article proposes a network security situation assessment model based on threat association network. Firstly, the association analysis algorithm April is used to perform network alarm data association analysis. Based on the analysis results, a threat association network is established. Then, based on the threat association network, the direct and indirect threats to each node in the network are calculated, thereby achieving the evaluation and calculation of the entire network security situation. Finally, the algorithm proposed in this article was validated using relevant datasets and tools. The experiment proved that the algorithm proposed in this article can truly reflect the network security situation and provide certain basic support for large-scale network security applications.