基于多源数据特征的服务安全态势感知模型研究  

Research on Technologies for Implementing Service Security Situation Awareness Modeling Based on Multi-Source Data Characteristics

作　　者：高斐[1,2] 王慧强[2] 

机构地区：[1]莆田学院电信系,福建莆田351100 [2]哈尔滨工程大学计算机科学与技术学院,黑龙江哈尔滨150001

出　　处：《武汉大学学报（理学版）》2011年第2期165-169,共5页Journal of Wuhan University:Natural Science Edition

基　　金：国家高技术研究发展计划(863计划)资助项目(2007AA01Z401);国家自然科学基金重大研究计划资助项目(90718003)

摘　　要：针对关键服务安全态势分析难的现状,本文提出一种新颖的服务安全态势感知模型(SSSA),并对服务数据源进行分类描述,将用户质量需求的性能参数,服务本身的可生存性以及服务运行的软硬件配置信息三方面作为影响服务态势变化趋势特征的重要因素.通过捕获DNS服务的态势数据来验证模型的可行性.实验结果表明模型对检测服务变化趋势具有良好的灵敏度,能够有效地检测服务偏离和失效,为安全管理员正确决策提供支持.For the real difficulties of the key service for the analysis of its security situation, this paper proposes a novel quantitative awareness model, and the data sources are from the multi-angle and multi- scale to depict the service. The SSSA （service secure situation awareness） contains three aspects, the user quality requirements of the performance parameters, service survivability and the running configure infor- mation and these are important indicators which can present the charact＇eristics of service situation chan- ges. Finally, it uses DNS to further verify further the model. Experimental results show that the modeling has a good sensitivity trends, and it can effectively detect the deviation and the failure of service, which help security administrators to make correct decisions.

关 键 词：网络安全 服务感知 态势评估 可生存性 性能 DNS 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TP393.06[自动化与计算机技术—计算机科学与技术]