DocumentCode :
2919640
Title :
A Quantification Method for Network Security Situational Awareness Based on Conditional Random Fields
Author :
Li, Jianping ; Wang, Huiqiang
Author_Institution :
Coll. of Comput. Sci. & Technol., Harbin Eng. Univ., Harbin, China
fYear :
2009
fDate :
24-26 Nov. 2009
Firstpage :
993
Lastpage :
998
Abstract :
Network security situational awareness(NSSA) has been a hot research spot in the network security domain. In this paper, a quantification method for NSSA based on conditional random fields(CRFs) was proposed. The data of network attacks from intrusion detection system (IDS), the hosts´ vulnerabilities and the hosts´ states were firstly combined as the network security factors. And then the network security threat degree was defined to quantify the risk of the whole network and classify the attacks. A diverse set of effective features were incorporated in CRFs Model. Finally the experiments on the DARPA 2000 data set generate the explicit network security situational graph. It proves that the method introduced in this paper can represent network risk more accurate and offer a good quantification for the network security situation.
Keywords :
security of data; DARPA 2000 data set; conditional random fields; intrusion detection system; network security factors; network security situational awareness; network security situational graph; Computer networks; Computer science; Computer security; Data security; Educational institutions; Hidden Markov models; Information security; Information technology; Intrusion detection; Petroleum; conditional random fields; network security situational awareness; network security threat degree;
fLanguage :
English
Publisher :
ieee
Conference_Titel :
Computer Sciences and Convergence Information Technology, 2009. ICCIT '09. Fourth International Conference on
Conference_Location :
Seoul
Print_ISBN :
978-1-4244-5244-6
Electronic_ISBN :
978-0-7695-3896-9
Type :
conf
DOI :
10.1109/ICCIT.2009.155
Filename :
5369556
Link To Document :
بازگشت