【摘要】 网络态势感知中的报警觉察在处理粒度、规模、目标等方面均不同于传统入侵检测中的报警分析,更加侧重于人的理解。本文在现有基于相似度报警分析方法的基础上设计了一种"基于相似度的宏观网络报警觉察算法",重新定义了报警属性相似度,将"优序对比法"引入属性权重设定,最后提出以"人的瞬时理解力"为依据的阈值选择方案。实验显示该方法能帮助网络管理人员从整体上把握网络异常的时间、范围、类型,理解网络的态势。更多还原

【Abstract】 The alert perception of network situation awareness is different from that of the traditional intrusion detection area in particle size,scale,target,and so on.It pays more attention to human understanding.Based on the existing similarity based alert analysis method,a " similarity based macro network alert awareness algorithm " is proposed.It gives a new definition of attribute similarity,and uses an " optimal sequence method " to improve attribute weight setting.Finally,a threshold selection scheme is proposed based on human instantaneous understanding.The experimental results show that this method can help network managers get the whole awareness of network situation including the time,range,and type of network abnormality.更多还原