Model-based Cyber Defense Situational Awareness

Author(s):  
Gabriel Klein ◽  
Simon Hunke ◽  
Heiko Günther ◽  
Marko Jahnke
Author(s):  
Gabriel Klein ◽  
Simon Hunke ◽  
Heiko Günther ◽  
Marko Jahnke

Author(s):  
Mei Hong Chen

To explore the prediction effect of network security situational awareness on network vulnerabilities and attacks under the background of big data, this study constructs a predictive index system based on the network security situational awareness model. Based on the improved cuckoo algorithm, the cuckoo search radial basis function neural network is used to predict the situation. The weight value in the model is determined by the hierarchical analysis method, vulnerability simulation is conducted by Nessus software and network attack simulation is conducted by Snort software, and then the situation is evaluated by a fuzzy comprehensive evaluation method. Finally, Jquery and Bootstrap software is used to develop the system. The results show that the cuckoo search radial basis function model proposed in this study could predict network security situations more accurately than the radial basis function model, cuckoo search back-propagation neural network model, genetic algorithm radial basis function model and Support vector machine model based on particle swarm optimization model.


2013 ◽  
Vol 846-847 ◽  
pp. 1632-1635
Author(s):  
Abasi

Security situational awareness has become a hot topic in the area of network securityresearch in recent years. The existing security situational awareness methods are analyzed and compared in details, and thus a newnetwork security situational awareness model based on information fusion is proposed. This modelfuses multi-source information from a mass of logs by introducing the modified D-S evidence theory,gets the values of nodes security situational awareness by situational factors fusion using attacks threat,and vulnerability information which network nodes have and successful attacks depend on, computesthe value of network security situational awareness by nodes situation fusion using service informationof the network nodes, and draws the security-situation-graph of network. Then, it analyzes the timeseries of the computing results by ARMA model to forecast the future threat in network security.Finally an example of actual network datasets is given to validate the network security situationalawareness model and algorithm. The results show that this model and algorithm is more effective andaccurate than the existing security situational awareness methods.


Author(s):  
Paul Barford ◽  
Marc Dacier ◽  
Thomas G. Dietterich ◽  
Matt Fredrikson ◽  
Jon Giffin ◽  
...  

2021 ◽  
pp. 526-536
Author(s):  
Hongbin Zhang ◽  
Yan Yin ◽  
Dongmei Zhao ◽  
Bin Liu ◽  
Hongbin Gao

Sign in / Sign up

Export Citation Format

Share Document