Security Situation Awareness Model Research Articles

Research on Network Security Situation Awareness Technology Based on Security Intelligent Monitoring Technology

This paper uses data mining technology to dynamically monitor tobacco Industrial Enterprise' information systems. This paper builds an Internet security situation awareness system under a big data environment. The weight clustering method is used to classify users' network behavior. The spacing of weights is optimized to ensure the maximum difference in classification. Then, NAWL-ILSTM technology establishes a security situational awareness model for the Internet environment. In this project, the extended and short-memory Nadam optimal algorithm (NAWL) is used to realize data deep learning. Finally, the tobacco industry network security situation assessment method is designed to complete the dynamic monitoring of tobacco industry network security based on data mining. Simulation results show that the proposed method can effectively improve the safety evaluation performance of the system and reduce evaluation errors.

Establishment of nonlinear network security situational awareness model based on random forest under the background of big data

Abstract In order to explore the establishment of a nonlinear network security situational awareness model based on random forest in the context of big data, a multi-level network security knowledge system evaluation model based on random forest is proposed. This article proposes a multi-level CSSA analysis system and then uses random memory algorithm to create a CSSA evaluation model. Also, it proposes a CSSA multi-level analysis framework and then uses random forest algorithm to build a CSSA evaluation model. A random vector distribution of the same values is used for all forest trees. In this article, the interval [0,1] is used to quantitatively describe the weight of the security level. The training sample ratio of test samples is 110:40, in order to predict the security of the network, the prediction of knowledge is closer to the true value, and the complexity of multi-level security is predicted. Use unusual forests. The tree returns the most recommended part, which is a more realistic assessment of network security. The experimental results show that considering the network security situation, the prediction performance of this method is closer to the actual value, and the performance is better than the other two methods. Therefore, perception of multi-level security situations can be effectively predicted using random access memory. It is proved that random forest is faster and more efficient in network security.

Exploration of a network security situational awareness model based on multisource data fusion

Exploration of a network security situational awareness model based on multisource data fusion

Deep learning-based security situational awareness and detection technology for power networks in the context of big data

Abstract With the comprehensive promotion of “big data + energy”, new power network security threats are also more prominent, and the traditional security system mainly based on “protection” will face great challenges. Firstly, this paper proposes four kinds of network security situational awareness detection techniques based on distributed data analysis by combining the characteristics of big data in power networks. Secondly, the CRIT-LSTM power network security situational awareness model is constructed by improving its loss evaluation process using the cross entropy (CE) function and improving the LSTM unit structure using linear unit (ReLU). Finally, the performance of the three models is compared and analyzed under two aspects of neural network training and testing and various metrics to verify the models’ effectiveness. The results show that the improved CRIT-LSTM model based on deep learning, combining LSTM and ReLU algorithms, has an RMSE of 0.717 for the training set and 0.806 for the test set. 7.32% accuracy and 10.51% improvement in recall compared to the LSTM-only model. The power network security situational awareness model based on the CRIT-LSTM model proposed in this paper integrates various security system functions to maximize the defense against attacks and reduce unnecessary security risk losses.

A Network Security Situation Awareness Method Based on GRU in Big Data Environment

Aiming at the “bottleneck” problems of the traditional network security situation awareness model, such as large equipment limitations, single data source and poor integration ability, weak level of autonomous learning and data mining, a network security situation awareness framework suitable for big data is constructed. A gate recurrent unit (GRU) model is established to effectively extract features from the situation data set through the deep learning algorithm of big data. It is a method to automatically mine and analyze the hidden relationship and change trend of network security situation, realize the high-speed acquisition and fusion of massive multi-source heterogeneous data, and perceive the network security situation from an all-round perspective. The experimental results show that this method has a good awareness effect on network threats, and has strong representation ability in the face of network threats. It can effectively perceive the network threat situation without relying on data labels, which verifies that this method can effectively improve the efficiency and accuracy of security situation awareness.

Industrial internet security evaluation technology based on digital twin

In the process of industrial Internet security situation analysis, affected by the perception model, the average approximation error of security assessment results is high. Therefore, an industrial Internet security evaluation technology based on digital twin is proposed. Design the industrial Internet assessment mode, design the industrial Internet technical framework according to the digital twin, and clarify the elements of security situation assessment. According to the sliding time window, the fuzzy knowledge base is established. The security situation awareness model is designed based on digital twin, combined with the calculation results of fuzzy closeness to improve the accuracy of automatic perception results. Establish a multi port access protocol and realize the industrial Internet security evaluation technology under the digital twin with the help of the backed up coded key file. The experimental results show that the accuracy of the evaluation results of the design method is always above 95%, the tamper-proof success rate is always above 95%, and the physical value difference between the final values is 0.10. Therefore, this method effectively improves the evaluation accuracy. and tamper-proof success rate, reducing the difference value, it effectively controls the deviation of Internet operation data, provides security, is feasible and effective.

Research on security situation awareness method of power network Monitoring system based on data mining

In the traditional security situation awareness methods of power network monitoring systems, there are deviations in the analysis of different sample data sets, which affect the security situation threat value perception results of power network monitoring systems. Therefore, this paper designs a security situation awareness method for a power network monitoring system based on data mining. The identification structure of security situation elements is determined, the self-encoder is used for mapping, the security situation elements of the power network monitoring system are extracted according to the obtained parameter samples, and the security situation awareness model of the power network monitoring system is established. The RBF neural network is used for data mining of the monitoring system, and the design of the security situation awareness method of the power network monitoring system based on data mining is completed. The experimental results show that the recognition accuracy of the design method for samples with different threat levels is more than 90%. Compared with the traditional methods, the security situation awareness results obtained by the design method are closer to the expected output threat value.

Network Security Situational Awareness Based on Genetic Algorithm in Wireless Sensor Networks

How to design an effective and secure user authentication scheme suitable for complex wireless sensor network (WSN) environments has very important research significance. Based on the genetic algorithm theory, the paper constructs the security situational awareness model of wireless sensor network, and studies the WSN user security authentication scheme. The model uses the genetic algorithm extraction technology combined with the hash function to generate the biometric key, which solves the data accuracy problem of network security situational awareness: the user’s biometric key is obtained through the fuzzy extraction technology; the resistance of the node is to be attacked, but it is powerless when most of the nodes are broken, and it limits the scalability of the network. During the simulation process, the authentication of the identity of the cluster head by the base station is added in the topology establishment stage, and a one-way hash function and a shared key are added to the key management, so that the encryption key and the authentication key change periodically and dynamically, so that enhanced network communication security. The analysis results show that the protocol is feasible. The algorithm proposed in this paper reduces about 70% of the features in the original feature set, the classification detection rate is increased from 95.7212% to 97.7379%, and the false alarm rate is reduced from 7.9427% to 3.1072%, effectively improving the balance between safety and design cost.

APPLICATION OF FRACTAL NEURAL NETWORK IN NETWORK SECURITY SITUATION AWARENESS

The purposes are to accurately perceive the network security situations and predict the development trend and effectively defend against network attacks during the operation of the Internet. The Long Short-Term Memory (LSTM) network is adopted as the subject of the network security situation awareness and prediction model. Moreover, it is optimized by the Genetic Algorithm (GA) to improve its global search capability. Then, a Fractal Neural Network (FNN) is constructed in combination with fractal theory, which is utilized in network security situation awareness to avoid the exploding or vanishing gradient problems. The KDD CUP 99 standard dataset is applied to verify the performance of the proposed GA-LSTM FNN; results demonstrate that its accuracy of network security situation awareness can reach 90.22%. The experimental results confirm that using the fractal difference function as the activation function can deliver the gradient variation in a balanced and stable manner. Besides, it can improve the feasibility and effectiveness of the neural network structure for network security situation awareness and prediction. The FNN studied is of practical significance for assessing the current network security situation and predicting its evolution trend, providing a reference for protecting the operation of the Internet from network attacks.

Information Security Situation Awareness Based on Big Data and Artificial Intelligence Technology

The information security threats faced by enterprises are increasing rapidly, and the technology of security attacks is also diversified and developed at a high level. The application of big data technology and artificial intelligence technology in all walks of life continues to deepen. While greatly improving social productivity, it also brings certain information security issues. Security situation awareness technology has become a new research hotspot in the field of network security. Using big data-related technologies to analyze, filter, merge, and identify known and unknown security threats is a new research discovery. This research builds a new cascaded network security situational awareness model based on the traditional and fusion decision tree algorithms. We use an induction algorithm to generate a decision tree on the preprocessed data to classify the data according to the decision rules. Research shows that a new network security situation awareness model is constructed using decision tree calculations. Compared with the traditional model, the classification effect of this model is better.

基于改进LSTM方法的安全态势感知模型研究

基于改进LSTM方法的安全态势感知模型研究

Software Development and Design of Network Security System Under Big Data Analysis

To explore the prediction effect of network security situational awareness on network vulnerabilities and attacks under the background of big data, this study constructs a predictive index system based on the network security situational awareness model. Based on the improved cuckoo algorithm, the cuckoo search radial basis function neural network is used to predict the situation. The weight value in the model is determined by the hierarchical analysis method, vulnerability simulation is conducted by Nessus software and network attack simulation is conducted by Snort software, and then the situation is evaluated by a fuzzy comprehensive evaluation method. Finally, Jquery and Bootstrap software is used to develop the system. The results show that the cuckoo search radial basis function model proposed in this study could predict network security situations more accurately than the radial basis function model, cuckoo search back-propagation neural network model, genetic algorithm radial basis function model and Support vector machine model based on particle swarm optimization model.

Situation prediction of large-scale Internet of Things network security

The Internet of Things (IoT) is a new technology rapidly developed in various fields in recent years. With the continuous application of the IoT technology in production and life, the network security problem of IoT is increasingly prominent. In order to meet the challenges brought by the development of IoT technology, this paper focuses on network security situational awareness. The network security situation awareness is basic of IoT network security. Situation prediction of network security is a kind of time series forecasting problem in essence. So it is necessary to construct a modification function that is suitable for time series data to revise the kernel function of traditional support vector machine (SVM). An improved network security situation awareness model for IoT is proposed in this paper. The sequence kernel support vector machine is obtained and the particle swarm optimization (PSO) method is used to optimize related parameters. It proves that the method is feasible by collecting the boundary data of a university campus IoT network. Finally, a comparison with the PSO-SVM is made to prove the effectiveness of this method in improving the accuracy of network security situation prediction of IoT. The experimental results show that PSO-time series kernel support vector machine is better than the PSO-Gauss kernel support vector machine in network security situation prediction. The application of the Hadoop platform also enhances the efficiency of data processing.

Graph database-based network security situation awareness data storage method

With the rapid development of the Internet, network security situation awareness has attracted tremendous attention. In large-scale complex networks, network security situation awareness data presents the characteristics of large-scale, multi-source, and heterogeneous. Recently, much research work have been done on network security situation awareness. However, most of the existing methods store different types of data in different ways, which makes data query and analysis inefficient. To solve this problem, we propose a graph database-based hierarchical multi-domain network security situation awareness data storage method. In our scheme, we build a hierarchical multi-domain network security situation awareness model to divide the network into different domains, which can collect and dispose the awareness data more efficiently. Meanwhile, to unify our storage mode, we also define network security situation awareness data storage rules and methods based on graph database. Finally, extensive experiments on real datasets show that our proposed method is efficient compared to state-of-the-art storage models.

An Immunity-Based IOT Environment Security Situation Awareness Model

To effectively perceive network security situation under IOT environment, an Immunity-based IOT Environment Security Situation Awareness (IIESSA) model is proposed. In IIESSA, some formal definitions for self, non-self, antigen and detector are given. According to the relationship between the antibody-concentration of memory detectors and the intensity of network attack activities, the security situation evaluation method under IOT environment based on artificial immune system is presented. And then according to the situation time series obtained by the mentioned evaluation method, the security situation prediction method based on grey prediction theory is presented for forecasting the intensity and security situation of network attack activities that the IOT environment will be suffered in next step. The experimental results show that IIESSA provides a novel and effective model for perceiving security situation of IOT environment.

Network Security Situation Awareness Based on Semantic Ontology and User-Defined Rules for Internet of Things

Internet of Things (IoT) brings the third development wave of the global information industry, which makes users, network, and perception devices cooperate more closely. However, if IoT has security problems, it may cause a variety of damage and even threaten human lives and properties. To improve the abilities of monitoring, providing emergency response, and predicting the development trend of IoT security, a new paradigm called network security situation awareness (NSSA) is proposed. However, it is limited by its ability to mine and evaluate security situation elements from multi-source heterogeneous network security information. To solve this problem, this paper proposes an IoT network security situation awareness model using a situation reasoning method based on semantic ontology and user-defined rules. Ontology technology can provide a unified and formalized description to solve the problem of semantic heterogeneity in the IoT security domain. In this paper, four key sub-domains are proposed to reflect an IoT security situation: context, attack, vulnerability, and network flow. Furthermore, user-defined rules can compensate for the limited description ability of ontology, and hence can enhance the reasoning ability of our proposed ontology model. The examples in real IoT scenarios show that the ability of the network security situation awareness that adopts our situation reasoning method is more comprehensive and more powerful reasoning abilities than the traditional NSSA methods.

Constructing general cube to be aware of network security situation

Concerning the problems of limited current network security situation assessment scope,single information source,higher time and space complexity and larger deviation of the accuracy,a method was put forward to construct general cube,which can be aware of the network security situation. The continuous situation factor data monitored can be pretreated by discretizing by "3σ rule"and aggregated in the general built cube,that fused into component security situation vertically and merged into the network security situation from component security situation using statistical methods horizontally. It can provide reliable reference to enhance network security. Finally,making full use of network data,the network security situation awareness model and algorithm proposed are verified and the experimental results show correctness of this method.

Immune-Based Systems on Network Security Situation Awareness and Risk Prediction Model

In this paper, the process of the developments and changes of the network intrusion behaviors were analyzed. An improved epidemic spreading model was proposed to study the mechanisms of aggressive behaviors spreading, to predict the future course of an outbreak and to evaluate strategies to control a network epidemic. Based on Artificial Immune Systems, the concepts and formal definitions of immune cells were given. And in this paper, the forecasting algorithm based on Markov chain theory was proposed to improve the precision of network risk forecasting. The data of the Memory cells were analyzed directly and kinds of state-spaces were formed, which can be used to predict the risk of network situation by analyzing the cells status and the classification of optimal state. Experimental results show that the proposed model has the features of real-time processing for network situation awareness.

A Cloud Security Situational Awareness Model Based on Parallel Apriori Algorithm

Network Security Situation Awareness (NSSA) is a hot topic in network security field, and cloud computing is a new technology integrated virtual storage and distributed computing. It has become the challenging questions how to provide efficient and reliable service for NSSA based on the cloud computing.This paper proposes a cloud security situation awareness model based on data mining, and puts forwarda parallelfrequent-tree Apriori algorithm (PFT-Apriori) for mining association rules. Compare with the traditional Apriori algorithm, the experimental results show that the performance of system is increased by 51% under PFT-algorithm.

A Network Security Situational Awareness Model Based on Information Fusion

Security situational awareness has become a hot topic in the area of network securityresearch in recent years. The existing security situational awareness methods are analyzed and compared in details, and thus a newnetwork security situational awareness model based on information fusion is proposed. This modelfuses multi-source information from a mass of logs by introducing the modified D-S evidence theory,gets the values of nodes security situational awareness by situational factors fusion using attacks threat,and vulnerability information which network nodes have and successful attacks depend on, computesthe value of network security situational awareness by nodes situation fusion using service informationof the network nodes, and draws the security-situation-graph of network. Then, it analyzes the timeseries of the computing results by ARMA model to forecast the future threat in network security.Finally an example of actual network datasets is given to validate the network security situationalawareness model and algorithm. The results show that this model and algorithm is more effective andaccurate than the existing security situational awareness methods.