Title :
Vulnerability Data Fusion Method Based on the D-S theory of Evidence
Author :
Zhong Qiuxi ; Zhao Zhengye
Author_Institution :
Coll. of Comput., Nat. Univ. of Defense Technol., Changsha, China
Abstract :
A fusion algorithm for network security situational awareness is proposed based on D-S theory of evidence, processing the vulnerability data from network scanning and host scanning. Though normalizing the vulnerability data, we constructed the corresponding basic probability assignment and fusion the data, fully used the redundancy and complementarity of multisource data, and integrated the results got by different scanning means. The results showed that this method obtained more comprehensive and reliable results.
Keywords :
computer network security; inference mechanisms; probability; redundancy; sensor fusion; D-S evidence theory; host scanning; multisource data complementarity; multisource data redundancy; network scanning; network security situational awareness; probability assignment; vulnerability data fusion method; vulnerability data normalization; Computers; Data integration; Data models; Educational institutions; Probability; Reliability; Security; D-S theory of evidence; Data fusion; Situational awareness; Vulnerability; Vulnerability scan;
Conference_Titel :
Instrumentation, Measurement, Computer, Communication and Control (IMCCC), 2012 Second International Conference on
Conference_Location :
Harbin
Print_ISBN :
978-1-4673-5034-1
DOI :
10.1109/IMCCC.2012.178
