Analysis framework of network security situational awareness and comparison of implementation methods

• Main Authors: Yan Li, Guang-qiu Huang, Chun-zi Wang, Ying-chao Li
• Format: Article
• Language: English
• Published: SpringerOpen 2019-08-01
• Series: EURASIP Journal on Wireless Communications and Networking
• Subjects: Network security; Network situational awareness; Big data network security; Intrusion detection; Data fusion analysis
• Online Access: http://link.springer.com/article/10.1186/s13638-019-1506-1

Abstract Information technology has penetrated into all aspects of politics, economy, and culture of the whole society. The information revolution has changed the way of communication all over the world, promoted the giant development of human society, and also drawn unprecedented attention to network security issues. Studies, focusing on network security, have experienced four main stages: idealized design for ensuring security, auxiliary examination and passive defense, active analysis and strategy formulation, and overall perception and trend prediction. Under the background of the new strategic command for the digital control that all countries are scrambled for, the discussion of network security situational awareness presents new characteristics both in the academic study and industrialization. In this regard, a thorough investigation has been made in the present paper into the literature of network security situational awareness. Firstly, the research status both at home and abroad is introduced, and then, the logical analysis framework is put forward concerning the network security situational awareness from the perspective of the data value chain. The whole process is composed of five successive stages: factor acquisition, model representation, measurement establishment, solution analysis, and situation prediction. Subsequently, the role of each stage and the mainstream methods are elaborated, and the application results on the experimental objects and the horizontal comparison between the methods are explained. In an attempt to provide a panoramic recognition of network security situational awareness, and auxiliary ideas for the industrialization of network security, this paper aims to provide some references for the scientific research and engineering personnel in this field.