###
:2017.28(4):1010-1026

网络安全态势感知综述
龚俭,臧小东,苏琪,胡晓艳,徐杰
(东南大学 计算机科学与工程学院, 江苏 南京 211189;江苏省计算机网络重点实验室, 江苏 南京 211189;计算机网络和信息集成教育部重点实验室, 江苏 南京 211189)
Survey of Network Security Situation Awareness
GONG Jian,ZANG Xiao-Dong,SU Qi,HU Xiao-Yan,XU Jie
(School of Computer Science and Technology, Southeast University, Nanjing 211189, China;Jiangsu Provincial Key Laboratory of Compmer Network Technology, Nanjing 211189, China;Key Laboratory of Computer Network and Information Integration Ministry of Education, Nanjing 211189, China)
Abstract
Chart / table
Reference
Similar Articles
Article :Browse 4310   Download 5795
Received:May 11, 2016    Revised:October 26, 2016
> 中文摘要: 随着网络空间安全重要性的不断提高,网络安全态势感知(network security situation awareness,简称NSSA)的研究与应用正在得到更多的关注.NSSA实现对网络中各种活动的行为辨识、意图理解和影响评估,以支持合理的安全响应决策.它是对网络的安全性进行定量分析的一种手段,网络安全管理系统可以借助其宏观把握整个网络的安全状况,分析攻击者的意图,为管理决策提供重要的依据.讨论了NSSA的任务范围,并据此对网络安全态势感知的概念进行了重新定义.然后,分别从网络安全态势觉察、网络安全态势理解、网络安全态势投射这3个层面综述了网络安全态势感知的研究现状和存在的问题.
Abstract:As the priority of cyber-security arises world-wide, network security situation awareness (NSSA) and its application help to draw more attentions of researchers. NSSA is able to identify network activities, understand their intentions and evaluate the impact of these activities on the managed network, as well as to support an optimal security response to the security threats. It is a means of quantitative analysis for network security, with which network security management system can have a global view of security states of the managed network, find the intention of attackers, and make a management decision based on these findings. In the paper, the coverage of NSSA is discussed to redefine the concept of NSSA. Then a survey is given on the state-of-art of NSSA's research in the aspects of network security situation perception, comprehension and projection. Finally the features and challenges of network security situation awareness are summarized.
文章编号:     中图分类号:    文献标志码:
基金项目:国家自然科学基金(61602114) 国家自然科学基金(61602114)
Foundation items:National Natural Science Foundation of China (61602114)
Author NameAffiliationE-mail
GONG Jian School of Computer Science and Technology, Southeast University, Nanjing 211189, China
Jiangsu Provincial Key Laboratory of Compmer Network Technology, Nanjing 211189, China
Key Laboratory of Computer Network and Information Integration Ministry of Education, Nanjing 211189, China 
jgong@njnet.edu.cn 
ZANG Xiao-Dong School of Computer Science and Technology, Southeast University, Nanjing 211189, China
Jiangsu Provincial Key Laboratory of Compmer Network Technology, Nanjing 211189, China
Key Laboratory of Computer Network and Information Integration Ministry of Education, Nanjing 211189, China 
xdzang@njnet.edu.cn 
SU Qi School of Computer Science and Technology, Southeast University, Nanjing 211189, China
Jiangsu Provincial Key Laboratory of Compmer Network Technology, Nanjing 211189, China
Key Laboratory of Computer Network and Information Integration Ministry of Education, Nanjing 211189, China 
 
HU Xiao-Yan School of Computer Science and Technology, Southeast University, Nanjing 211189, China
Jiangsu Provincial Key Laboratory of Compmer Network Technology, Nanjing 211189, China
Key Laboratory of Computer Network and Information Integration Ministry of Education, Nanjing 211189, China 
 
XU Jie School of Computer Science and Technology, Southeast University, Nanjing 211189, China
Jiangsu Provincial Key Laboratory of Compmer Network Technology, Nanjing 211189, China
Key Laboratory of Computer Network and Information Integration Ministry of Education, Nanjing 211189, China 
 
Reference text:

龚俭,臧小东,苏琪,胡晓艳,徐杰.网络安全态势感知综述.软件学报,2017,28(4):1010-1026

GONG Jian,ZANG Xiao-Dong,SU Qi,HU Xiao-Yan,XU Jie.Survey of Network Security Situation Awareness.Journal of Software,2017,28(4):1010-1026