基于多源数据特征的服务安全态势感知模型研究

基于多源数据特征的服务安全态势感知模型研究 Research on Technologies for Implementing Service Security Situation Awareness Modeling Based on Multi-Source Data Characteristics 高斐 GAO Fei1 1 2 first-author 王慧强 WANG Huiqiang2 2 莆田学院电信系 莆田学院电信系 Department of Electronics and Information,Putian University Department of Electronics and Information,Putian University 哈尔滨工程大学计算机科学与技术学院 哈尔滨工程大学计算机科学与技术学院 School of Computer Science and Technology,Harbin Engineering University School of Computer Science and Technology,Harbin Engineering University 针对关键服务安全态势分析难的现状,本文提出一种新颖的服务安全态势感知模型（SSSA）,并对服务数据源进行分类描述,将用户质量需求的性能参数,服务本身的可生存性以及服务运行的软硬件配置信息三方面作为影响服务态势变化趋势特征的重要因素.通过捕获DNS服务的态势数据来验证模型的可行性.实验结果表明模型对检测服务变化趋势具有良好的灵敏度,能够有效地检测服务偏离和失效,为安全管理员正确决策提供支持. For the real difficulties of the key service for the analysis of its security situation,this paper proposes a novel quantitative awareness model,and the data sources are from the multi-angle and multi-scale to depict the service. The SSSA（service secure situation awareness） contains three aspects,the user quality requirements of the performance parameters,service survivability and the running configure information and these are important indicators which can present the characteristics of service situation changes.Finally,it uses DNS to further verify further the model.Experimental results show that the modeling has a good sensitivity trends,and it can effectively detect the deviation and the failure of service,which help security administrators to make correct decisions. 网络安全 服务感知 态势评估 可生存性 性能 DNS network security service awareness situation evaluation survivability performance DNS 10.14188/j.1671-8836.2011.02.004 TP393.08 国家高技术研究发展计划（863计划）资助项目（2007AA01Z401）;国家自然科学基金重大研究计划资助项目（90718003） 2011-02-01 2021-04-01 2 57