面向网络态势感知的多源安全信息融合研究

Network security situation awareness(NSSA) system can monitor a large-scale network real-timely by collecting and analyzing multi-source security information. This paper based on the method of fusing information into scenarios. A fusion model of multi-source security information for network situational awareness was designed and implemented. Experiments showed that this fusion model had the ability to aware network situation in Large-scale network. It also could reduce false positive and false negative rate caused by single sensor working independently. Therefore it could reflect the changing trend of network security situation accurately and had a good prospect.