网络安全态势感知研究综述  

Research survey of network security situation awareness

作　　者：席荣荣[1] 云晓春[1] 金舒原[1] 张永铮[1] 

机构地区：[1]中国科学院计算技术研究所,北京100190

出　　处：《计算机应用》2012年第1期1-4,59,共5页journal of Computer Applications

基　　金：国家自然科学基金资助项目(60703021);国家863计划项目(2009AA01Z438;2009AA01Z431)

摘　　要：网络安全态势感知(SA)的研究对于提高网络的监控能力、应急响应能力和预测网络安全的发展趋势具有重要的意义。基于态势感知的概念模型,详细阐述了态势感知的三个主要研究内容:网络安全态势要素提取、态势理解和态势预测,重点论述各研究点需解决的核心问题、主要算法以及各种算法的优缺点;最后对各研究点的相关理论及其应用实现的发展趋势进行了分析和展望。The research of network security Situation Awareness（SA） is important in improving the abilities of network detection,response to emergency and predicting the network security trend.In this paper,based on the conceptual model of situational awareness,three main problems with regard to network security situational awareness were discussed： extraction of the elements in the network security situation,comprehension of the network security situation and projection of future situation.The core issues to be resolved,and major algorithms as well as the advantages and disadvantages of various algorithms were focused.Finally,the opening issues and challenges for network security situation awareness concerning both theory and implementation in near future were proposed.

关 键 词：态势感知 网络安全 数据融合 态势预测 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]