Movatterモバイル変換

Abstract:Aiming at the problem of the accuracy and real-time of situation assessment,a real-time network security si-tuation assessment based on rough set method was proposed.It acquires high-quality rule sets from multi-sample through rough set theory,and generates multi-level rule trees,then integrates rule into real-time attack awareness engine to achieve online analysis and detection of dynamic data stream at the same time.And the result as the evidence of situation assessment is used to compute the value of situation in whole network according to the model of situation assessment at last.The method improves the assessment on accurate,real-time,objective sufficiently by experiments.

Key words:Network security,Situation assessment,Rough set,Dynamic,Real-time,Rule trees,Attack awareness