安全报警融合环境中信息的关联  

Association of information in security alerts fusion environment

作　　者：刘靖[1,2] 刘建伟[1] 张铁林[2] 陈建华[2] 刘芋存 

机构地区：[1]北京航空航天大学电子信息工程学院,北京100191 [2]酒泉卫星发射中心,甘肃酒泉732750 [3]两河中心学校,四川广安638509

出　　处：《计算机工程与应用》2011年第25期107-111,125,共6页Computer Engineering and Applications

基　　金：国家高技术研究发展计划(863)(No.2009AA01Z418);中央高校基本科研业务费专项资金资助(No.YWF1002009)~~

摘　　要：网络中各个安全产品各自为阵,难以满足全方位集成防御体系的需求,信息融合是安全技术的发展趋势。基于分层融合的思想提出SAFE(Security Alerts Fusion Environment),对安全报警信息进行融合,采用一阶谓词逻辑,从网络安全行为描述和关联规则等方面叙述报警信息的关联。SAFE生成简洁直观的综合性安全信息,为安全事件响应决策提供有效支持。If the network security products operate independently,it can not meet the demand for integrated defense.Information fusion is the development trend of security technology.Based on idea of hierarchical fusion,this paper proposes a Security Alerts Fusion Environmen（tSAFE）.Security alarms are fused.First-order predicate logic is used and the associated processing of information is realized.From description of network security behavior and association rules etc,the association of information is described.SAFE generates intuitionistic and comprehensive security information,provides effective support for security response decision.

关 键 词：安全报警融合环境(SAFE) 分层融合 关联 一阶谓词逻辑 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]