Abstract: Concerning the fusion essence of network situational assessment and the defect of being unaware of the unknown attack in the existing Analytic Hierarchy Process (AHP), a network security evaluation method based on link security situation was proposed. With the help of the theory of network performance analysis, the network security situational assessment model based on link performance analysis was proposed. Firstly, the paper calculated every links security situational value and showed them in a matrix; secondly, used every links weight and security situational value to get the network security situational value which was shown in vector. The experimental results show that the proposed method can not only reflect the changes of both the partial and entire security situation but also apperceive unknown attack, which provides administrator with much convenience.

Key words: fusion, performance analysis, link security situation, network security situation, unknown attack

摘要： 针对网络安全态势评估的融合特性和现有层次化态势评估方法存在对未知攻击感知不足的问题，提出融合链路安全态势值来计算网络安全态势值的方法。借助网络性能分析的相关理论，提出了基于链路性能分析的网络安全态势评估模型。在态势值计算过程中，首先计算不同时段各链路的安全态势值，并把结果以矩阵形式表现出来；然后，将各链路安全态势值进行加权融合，得到不同时段的网络安全态势值，并以向量形式表示。实验结果证明，所提方法能够反映网络局部和整体的安全状况变化，并且对未知攻击具有良好的感知能力，给网络安全管理带来了方便。

关键词: 融合, 性能分析, 链路安全态势, 网络安全态势, 未知攻击