计算机科学与技术

基于时间序列分析的网络安全态势预测

展开
  • 1. 中南大学 信息科学与工程学院 湖南 长沙 410083; 2. 中车株洲电力机车研究所有限公司,湖南 株洲 412001
文志诚(1972-),男,教授,博士后,现就职于湖南工业大学计算机与通信学院,主要从事网络安全研究. E-mail:zcwen@ mail. shu. edu. cn

收稿日期: 2015-09-18

  修回日期: 2015-10-14

  网络出版日期: 2016-04-12

基金资助

国家自然科学基金资助项目(61379057,61309027,61073186);湖南省自然科学基金资助项目(2016JJ5034);中南大学博士后基金资助项目(114006)

Prediction of Network Security Situation on the Basis of Time Series Analysis

Expand
  • 1.School of Information Science and Engineering,Central South University,Changsha 410083,Hunan,China; 2.CRRC Zhuzhou Institute Co.,Ltd.,Zhuzhou 412001,Hunan,China
文志诚(1972-),男,教授,博士后,现就职于湖南工业大学计算机与通信学院,主要从事网络安全研究. E-mail:zcwen@ mail. shu. edu. cn

Received date: 2015-09-18

  Revised date: 2015-10-14

  Online published: 2016-04-12

Supported by

Supported by the National Natural Science Foundation of China(61379057,61309027,61073186)and the Natu- ral Science Foundation of Hunan Province(2016JJ5034)

摘要

针对现有网络安全态势预测的信息来源单一、缺乏实时性等问题,通过考察网络安全态势变化特点,提出了基于时间序列分析的预测方法. 首先构建主机上一系列隐马尔可夫预测模型,充分利用多源异构信息,刻画不同时刻主机安全态势的前后依赖关系,预测主机下一时刻的安全态势;再综合考虑网络上所有主机安全态势,量化计算出下一时刻的网络安全态势,间接地预测网络安全态势变化规律及发展方向. 通过真实网络环境的实验,验证了文中提出的方法在网络安全态势预测中的可行性和有效性.

本文引用格式

文志诚 陈志刚 唐军 . 基于时间序列分析的网络安全态势预测[J]. 华南理工大学学报(自然科学版), 2016 , 44(5) : 137 -143,150 . DOI: 10.3969/j.issn.1000-565X.2016.05.021

Abstract

As the existing network security situation prediction is restricted to its single information source and poor real-time property,a new prediction method fully considering the variation of network security situation is proposed on the basis of time series analysis.In this method,a series of hidden Markov models are constructed to predict the security situation for hosts according to the front and back dependence,and then to predict the trend of network se- curity at the next moment by fully using multi-source heterogeneous information.Moreover,the network security si- tuation at the next moment is quantitatively calculated from all hosts in the network.Thus,the change law and de- velopment direction of network security situation can be indirectly predicted.Experimental results in real network environments show that the proposed prediction method of network security situation is feasible and effective.
文章导航

/