The Study On The Model Of Network Security Situational Awareness

With the rapid development of network technology, the size and complexity of network has rapidly expanded, and the vulnerability of the network is more and more obvious. As network attack techniques are constantly updating, and new attack tools are vastly emerging, the traditional network security technologies are becoming increasingly powerless, resulting in severe problems in network security. The network security technologies have gradually developed from the traditional intrusion detection to the survivable research and intrusion tolerance; from concerning about the confidentiality of information to focusing on the sustainability of service and the availability of information; from focusing on a single problem solution to the security status and trends of the whole internet architecture.Network security situational awareness is to extract the elements that impact network security, to evaluate and predict the future trend of the network development. It is a measurement of the precision of network security situation and a means of quantitative analysis of network security. Therefore, the study of the technology of network security situational awareness is of great significance, which can assess the overall security state of the system and forecast its development trend by integrating a variety of network security elements. Currently, the research of network security situational awareness has become more and more at home and abroad, but there are many divergences on its specific meaning, and its technical framework model has not yet been completed. Moreover, the research of security assessment algorithm and evaluation models is still in infancy, and lack systematic quantitative analysis techniques.Aiming at the problem that the index weight in the network security situation assessment model is too subjective, this paper proposes the network security situation assessment model based on gray relational analysis and fuzzy comprehensive evaluation method. The model selects the threatened assessment index according to extracted principles of network security, which combines the gray theory and fuzzy theory, determining weigh vector by means of gray relational analysis, improving the objectivity of indexes weights, and using the weighted average principle to determine the network security rating. At first, the evaluation index set of network security situational will be formed, which consist of eight factors and based on extracted principles. On this basis, it provides the quantitative methods of evaluation. Gray relational analysis model is used to determine the evaluation index weight vector and to improve the objectivity of index weights.Secondly, the paper puts forward network security threat assessment model based on gray fuzzy matrix. Through the establishment of the fuzzy matrix, it gets the final results of network security threat assessment and network threat situation map.Finally, concerning the prediction of the network security situation, the paper proposes forecasting techniques of network security threat situation based on time series. Through the analysis of network security situation in the past, a more accurate predictive value of network security situation can be obtained.