Network security situational awareness model based on set pair analysis
基于集对分析的网络安全态势评估

To observe the network security situation intuitively, so the administrator can make a quick decision, this paper proposed a network security situational awareness model based on set pair analysis. First of all, it preprocessed the data from every sensor. Then fused multisensor data by introducing the set pair analysis theory and worked out the SA of every host. Finally, it proposed a quantitative security situation assessment model by using bottom-up hierachical structure to evaluate the overall situation of the network. Through the analysis of the DARPA 2000 dataset, the result shows the set pair analysis can evaluate the exactly degree of the network security situation. So it can work out the whole security situation of the network.