基于异构数据源的信息网络安全态势感知方法  

Information Network Security Situation Awareness Method Basedon Heterogeneous Data Sources

作　　者：于继江[1] 姜杰斯 董中平[1] YU Jijiang;JIANG Jiesi;DONG Zhongping(National Institutes of Food and Drug Control,Beijing 102629,China)

机构地区：[1]中国食品药品检定研究院,北京102629

出　　处：《自动化与仪器仪表》2024年第8期55-58,共4页Automation & Instrumentation

摘　　要：感知信息网络安全态势为安全防护策略的提出和实施提供了可靠的依据,在很大程度上避免信息丢失和泄露。在此背景下,研究一种基于异构数据源的信息网络安全态势感知方法。利用集成模型采集异构源数据并实施清洗处理。利用主成分分析方法从异构源数据中提取网络安全态势要素。结合网络安全态势二级要素权重计算一级要素量化值。输入到深度神经网络当中,计算信息网络安全态势值并划分安全等级。结果表明:某公司的安全态势值呈现先平稳、后下降、再上升的趋势,网络安全等级从开始的非常高维持一段时间后开始下降,直至到达了较低等级,之后回升到了非常高等级。Perceiving the security situation of information networks provides a reliable basis for proposing and implementing security protection strategies,greatly avoiding information loss and leakage.In this context,a method for information network security situational awareness based on heterogeneous data sources is studied.Utilize integrated models to collect heterogeneous source data and implement cleaning processing.Extract network security situational elements from heterogeneous source data using principal component analysis.Calculate the quantification value of primary elements based on the weight of secondary elements in the network security situation.Input it into a deep neural network,calculate the security situation value of the information network,and classify the security level.The results show that the security situation value of a certain company shows a trend of first stabilizing,then decreasing,and then increasing.The network security level starts to decline after maintaining a very high level for a period of time,until reaching a lower level,and then rebounds to a very high level.

关 键 词：异构数据源 信息网络安全 态势要素 态势感知方法 

分 类 号：TP241.2[自动化与计算机技术—检测技术与自动化装置]