【作者】 梁颖；

【导师】 王慧强；

【作者基本信息】 哈尔滨工程大学 ， 计算机应用技术， 2007， 硕士

【摘要】 网络安全态势感知研究的提出是对传统网络安全手段的一次突破和创新，并逐渐成为当前网络安全领域一个新的研究热点。网络安全态势感知要求从全面、整体的角度审视大规模网络的安全状况，强调对网络系统中潜在的或已经出现的异常做到及时监测，并能对未来一段时间内网络的安全状况做出合理准确的预测。网络安全态势感知的中心思想是从认知的角度出发，充分利用一种或几种数学方法，融合处理网络环境下的多源异构安全状态数据，生成易于理解的网络安全态势。本文首先对网络安全态势感知及数据融合在网络安全领域的应用进行了全面研究，涵盖了网络安全态势感知的概念描述、研究现状及未来发展方向等，并介绍了数据融合在网络安全领域应用的前景、关键技术及其数学模型实现方法，初步形成了利用数据融合技术实现网络安全态势感知的理论框架。进而提出了分层网络安全态势感知实现模型，采用进化策略优化设计神经网络参数，建立了基于进化神经网络(ENN)的态势要素提取模型，并最终完成对网络安全态势数学建模。借鉴粗糙集理论(RST)的属性重要性度量思想，实现了网络安全态势的定量计算方法，并通过实验验证了该方法的有效性。最后，本文对课题相关工作进行了总结，并提出了下一步研究的重点所在。更多还原

【Abstract】 The proposal of network security situational awareness (NSSA) research means a breakthrough and an innovation to the traditional network security technologies, and it has become a new hot research topic in network security field. A new perspective to observe the network security status is demanded in NSSA, timely detection of potential or arisen anomalies in network system is emphasized, and also forecast of network security status in some time later should be made reasonably and exactly. The main idea of NSSA is to make full use of one or several kinds of mathematical methods to fuse the multi-source heterogeneous data in the network system, and then easily understandable network security situation will be generated from a cognitive perspective.Firstly, NSSA and the application of data fusion in network security are researched comprehensively in this thesis, including the concept description, research state, and developing direction of NSSA, and then the application future of data fusion in network security field, key technologies and its mathematical models are introduced, so the theoretical framework of NSSA using data fusion is formed primarily. Secondly, layered realization model of NSSA is constructed, and then the situational factor extraction model based on evolutionary neural network is constructed, in which evolutionary strategy is used to optimize the neural network parameters. Thirdly, referencing the idea of attributes’ importance measure in rough set theory, the mathematical model of NSSA is set up, the quantitative computation of network security situation is achieved, and experiment is done to check the validity of the method. Finally, the relative research in this field is summarized, and the next research points are put forward.更多还原