文档介绍：软件学报 ISSN 1000-9825, CODEN RUXUEW E-mail: ******@iscas.
Journal of Software,2017,28(4):1010−1026 [doi: .005142]
©中国科学院软件研究所版权所有. Tel: +86-10-62562563
∗
网络安全态势感知综述
龚俭 1,2,3, 臧小东 1,2,3, 苏琪 1,2,3, 胡晓艳 1,2,3, 徐杰 1,2,3
1(东南大学计算机科学与工程学院,江苏南京 211189)
2(江苏省计算机网络重点实验室,江苏南京 211189)
3(计算机网络和信息集成教育部重点实验室,江苏南京 211189)
通讯作者: 龚俭, E-mail: ******@.; 臧小东, E-mail: ******@.
摘要: 随着网络空间安全重要性的不断提高,work security situation awareness,简称
NSSA) 实现对网络中各种活动的行为辨识、意图理解和影响评估,以支持
,网络安全管理系统可以借助其宏观把握整个
网络的安全状况,分析攻击者的意图, NSSA 的任务范围,并据此对网络安全态势
,分别从网络安全态势觉察、网络安全态势理解、网络安全态势投射这 3 个层面
综述了网络安全态势感知的研究现状和存在的问题.
关键词: 网络安全态势感知;数据融合;模型;关联性分析;综述
中图法分类号: TP309
中文引用格式: 龚俭,臧小东,苏琪,胡晓艳,,2017,28(4):1010−1026. .
cn/1000-9825/
英文引用格式: Gong J, Zang XD, Su Q, Hu XY, Xu J. Survey work security situation awareness. Ruan Jian Xue Bao/
Journal of Software, 2017,28(4):1010−1026 (in Chinese). /1000-9825/
Survey work Security Situation Awareness
GONG Jian1,2,3, ZANG Xiao-Dong1,2,3, SU Qi1,2,3, HU Xiao-Yan1,2,3, XU Jie1,2,3
1(School puter Science and Technology, Southeast University, Nanjing 211189, China)
2(Jiangsu Provincial Key Laboratory work Technology, Nanjing 211189, China)
3(Key Laboratory work and Information Integration Ministry of Education, Nanjing 211189, China)
Abstract: As the priority of cyber-security arises world-wide, network security situation awareness (NSSA) and its application help to
draw more attentions of researchers. NSSA is able to work activities, understand their intentions and evaluate the impact of
these activities on the work, as well as to support an optimal security response to the security threats. It is a means of
quantitative analysis work security, with work security management system can have a global view of security states of
the work, find the intention of attackers, and make a management decision based o