YHSSAS:面向大规模网络的安全态势感知系统  

YHSSAS:Large-scale Network Oriented Security Situational Awareness System

作　　者：贾焰[1] 王晓伟[1] 韩伟红[1] 李爱平[1] 程文聪[1] 

机构地区：[1]国防科技大学计算机学院,长沙410073

出　　处：《计算机科学》2011年第2期4-8,37,共6页Computer Science

基　　金："863"国家高技术研究发展计划(2007AA010502;2007AA01Z474;2006AA01Z451)资助。

摘　　要：网络安全态势感知系统NSSAS(Network Security Situation Awareness System)能够感知网络安全的整体态势,对提高网络的应急响应和主动防御能力具有重要作用。现有的NSSAS处理能力有限,难以应用于国家骨干网等大规模网络。介绍了一个面向大规模网络的安全态势感知系统YHSSAS,首先提出一个网络安全态势感知模型,然后从数据集成、关联分析、指标体系、事件预测几个方面介绍了涉及的关键技术。NSSAS（Network Security Situation Awareness System） can perceive the overall network security situation.It plays an important role in improving the emergency response capacity and active defense capability of the networks.Existing NSSAS is limited in processing capacity,which is difficult to apply to the national backbone network and other large-scale networks.This paper introduced a NSSAS designed for large-scale networks named YHSSAS.The situational awareness model was proposed first,and then several key technologies,including data integration,correlation analysis,indicators quantification and event predication,were detailed.

关 键 词：YHSSAS 网络安全态势感知系统 数据集成 关联分析 指标体系 事件预测 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]