关键词: 自律计算, 网络安全态势感知, 态势提取, 态势评估, 态势预测

Abstract: Concerning the complexity of network security management and the absence of self-adaptation on situation awareness process, a Network Security Situation Awareness Model (NSSAM) based on autonomic computing was proposed. The situation extraction was analyzed in real-time by an autonomic feedback law. From the perspectives of attack and defense, a multi-level and multi-angle network security situation assessment model employing Analytic Hierarchy Process (AHP) was established according to the extracted situation information. The model of future network security situation prediction adopting improved genetic neural network was built on the basis of the past and current network security situation. Test results show that NSSAM with autonomic feedback mechanism can effectively enhance self-adaptation of the system.

Key words: autonomic computing, network security situation awareness, situation extraction, situation assessment, situation prediction