Research on Network Security Situation Assessment Model Based on Double AHP

Abstract

AbstractNetwork security situation assessment is an important part of the situational awareness research process and the most important thing. Situation assessment refers to the assessment of the current security status of the system through real-time analysis of network security situation awareness data and the use of appropriate models and methods. The current network boundaries are gradually disintegrating, and the power Internet is moving toward a trend of complex architecture, increased exposure of attack surfaces, and wider business scope. It is necessary to research mobile security monitoring under the zero-trust architecture to improve business security. Business hazard detection and risk prevention capabilities, and network security situation assessment are the focus of mobile security monitoring research. Aiming at the possible risks in network security, this paper proposes an improved AHP (Analytic Hierarchy Process) to comprehensively evaluate situational awareness information. First, build a single-node hierarchical analysis model based on the analytic hierarchy process inside the node, and calculate the evaluation result of the single-node equipment. Subsequently, the single-node equipment is used as a hierarchical analysis factor, and the hierarchical analysis model has been constructed again, and the situation assessment results of the distributed system composed of multiple nodes are comprehensively calculated. This network security situation assessment model based on double AHP provides a concrete and feasible scheme for the distributed system from single-point situation assessment to multi-point integration situation assessment.KeywordsDouble analytic hierarchy processSituation assessmentNetwork securityZero trust