基于态势感知的网络安全综合管控平台设计  

Design of integrated network security management system based on situation awareness

作　　者：陆孺牛 刘吉[2] 孙涛[3] 魏克 LU Runiu;LIU Ji;SUN Tao;WEI Ke(Tsinghua University Shenzhen International Graduate School,Shenzhen 518055,Guangdong Province,P.R.China;Beijing University Shenzhen Graduate School,Shenzhen 518055,Guangdong Province,P.R.China;Town Network Information Center,Shenzhen University,Shenzhen 518055,Guangdong Province,P.R.China;Beijing Secspace Co.Ltd,Beijing 100083,P.R.China)

机构地区：[1]清华大学深圳国际研究生院信息中心,广东深圳518055 [2]北京大学深圳研究生院信息中心,广东深圳518055 [3]深圳大学城网络信息中心,广东深圳518055 [4]北京三思网安科技有限公司,北京100083

出　　处：《深圳大学学报（理工版）》2020年第S01期60-63,共4页Journal of Shenzhen University(Science and Engineering)

摘　　要：在日益严峻的网络安全形势下,高校网络中心需要高效、准确、智能地定位网络攻击,自动化处理安全事件.借助OODA LOOP决策模型,对态势感知理论进行延伸和扩展,建立由观察、判断、决策和行动4阶段构成的控制过程环.提出基于网络安全态势感知和OODA LOOP决策模型,建设网络安全管控平台的设计思路,为构建校园网安全一体化管理体系提供支撑.At present,network centers in universities must try to efficiently,accurately and intelligently locate network attacks,and automatically handle security events.In this paper,we extend the concept of situational awareness based on the OODA Loop theory,and apply network security situation awareness(NSSA)to four stages:observe,orientation,decision,and action,which consist of a control process loop.We also propose the network security management and control platform based on NSSA concept to provide enough support for building an integrated campus network security management system.

关 键 词：网络安全 态势感知 综合管控 OODA环 安全事件 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]