基于Renyi交叉熵与CVSS的网络安全态势评估模型  

Thenetwork security situation assessment model based on Renyicross entropy and CVSS

作　　者：李小雨 王怀彬 LI Xiao-yu;WANG Huai-bin(School of Computer Science and Engineering,Tianjin University of Technology,Tianjin 300384,China)

机构地区：[1]天津理工大学计算机科学与工程学院

出　　处：《天津理工大学学报》2019年第5期12-17,共6页Journal of Tianjin University of Technology

基　　金：天津科技重大专项(16YDLJGX00210)

摘　　要：网络安全态势评估对于保证网络的可靠运行具有非常重要意义,是一种重要的网络监管手段.本文提出一种基于网络流量评估、威胁评估、和漏洞评估三个模块的网络安全态势评估模型,弥补单一考虑网络某一方面因素的方式从而导致网络安全态势的评估不够全面的问题.本文介绍了如何部署该网络框架,并如何应用此网络框架实时地反应网络安全态势.通过与其他算法进行对比,结果表明该方法可以准确、合理地反应网络安全态势.The network security situation assessment is essential for ensuring the reliable operation of the network,and it is an effective network supervision way.The paper proposes a network security situation assessment model based on network traffic assessment,threat assessment and vulnerability assessment.This method can make up for the single consideration of a certain aspect of the network,which leads to the problem of insufficient assessment of network security posture.The paper describes how to deploy the network framework and how to apply this network framework to reflect network security postures in real time.Compared with the other two approaches,results of the experiment show the method can reflect the network security situation accurately and reasonably.

关 键 词：网络安全 CVSS Renyi交叉熵 态势评估 

分 类 号：TP393.0[自动化与计算机技术—计算机应用技术]