网络安全态势指标体系及可视化技术研究.pdfVIP

网络安全态势指标体系及可视化技术研究 1,2 1 2 黎筱彦 ，王清贤 ，杨林 ( 1.信息工程大学 信息工程学院，河南 郑州 450002 ；2. 中国电子系统工程研究所，北京 100141) 摘 要：网络安全态势指标体系及可视化技术已成为网络信息安全的一个重要研究方向，如何直观展现全网 整体安全态势对安全管理人员具有重要的现实意义。针对安全态势指标不准确、计算方法不实用、可视化效 果不直观等技术问题，提出了网络攻防双方的安全态势指标体系并对其进行了量化，设计并实现了基于地理 信息系统、网络拓扑图、攻击路径等的安全态势可视化原型系统，通过可视化技术将安全态势数据以多视图、 多角度、多层次地展现给用户，使得安全态势的展现更加准确和生动，为及时准确评估网络安全态势、快速 做出决策奠定了基础。 关键词：安全态势；指标体系；量化；可视化 The Research of Network Security Situation Index System and Visualization Technology LI Xiao-yan 1,2, WANG Qing-xian 1 ,YANG Lin 2 ( 1. Zhengzhou Information Science and Technology Institute, Henan 450002, China; 2. Institute of China Electronic System Engineering , Beijing 100141, China) Abstract : Network security situation indicator system and visualization technology was of great importance for network information security, how to visually show the overall security situation had important practical significance to network security management personnel . For the technical issues that the index of security situation was not accurate, calculating method was not practical, and visual effects was not straightforward . The security situation index system of offensive and defensive sides of the network was proposed and quantified the security index, designed and implemented based on geographic information systems, network topology graph, attack paths the security situation visualization prototype system . the security situation data showed in multiple views, multi-angle, multi-level display to the user by visualization technology, therefore the performance of the security situa