本文關(guān)鍵詞： 網(wǎng)絡(luò)安全 態(tài)勢感知 遺傳算法 神經(jīng)網(wǎng)絡(luò) 態(tài)勢評估　出處：《寧夏大學(xué)》2017年碩士論文　論文類型：學(xué)位論文

【摘要】：計(jì)算機(jī)技術(shù)和通信技術(shù)高速發(fā)展,網(wǎng)絡(luò)攻防技術(shù)不斷革新,網(wǎng)絡(luò)威脅加劇,信息系統(tǒng)安全受到嚴(yán)重挑戰(zhàn)。新常態(tài)下的互聯(lián)網(wǎng)環(huán)境下的網(wǎng)絡(luò)防御手段和攻擊手段的發(fā)展出現(xiàn)了嚴(yán)重的不平衡,智能化安全防御體系的研究成為熱點(diǎn)。數(shù)據(jù)融合技術(shù)的發(fā)展使得網(wǎng)絡(luò)安全評估向綜合性發(fā)展,但這些技術(shù)局限于反映過去和當(dāng)前的網(wǎng)絡(luò)態(tài)勢狀況,難以適應(yīng)如今復(fù)雜多變的網(wǎng)絡(luò)環(huán)境,網(wǎng)絡(luò)安全的發(fā)展傾向于被動防御轉(zhuǎn)為主動防御,智能化、可視化、全局化等網(wǎng)絡(luò)安全的特點(diǎn)顯得尤為突出,機(jī)器學(xué)習(xí)、大數(shù)據(jù)挖掘等方法和技術(shù)的研究和運(yùn)用加速了網(wǎng)絡(luò)防御技術(shù)的發(fā)展,特別是可視化前端技術(shù)的發(fā)展為網(wǎng)絡(luò)安全態(tài)勢感知體系的動態(tài)展示提供了良好的技術(shù)支撐。本文通過研究區(qū)域網(wǎng)絡(luò)信息系統(tǒng)中安全事件,結(jié)合網(wǎng)絡(luò)中硬件采集的日志信息,運(yùn)用智能化的態(tài)勢分析的方法使網(wǎng)絡(luò)管理者通過直觀的可視化展示判斷當(dāng)前網(wǎng)絡(luò)安全狀況,感知未來網(wǎng)絡(luò)安全狀況并及時做出調(diào)整,保護(hù)網(wǎng)絡(luò)資產(chǎn)不受損失,提高信息系統(tǒng)網(wǎng)絡(luò)攻擊防范能力。基于GA-RBF神經(jīng)網(wǎng)絡(luò)的網(wǎng)絡(luò)安全態(tài)勢感知系統(tǒng)的研究和實(shí)現(xiàn)主要工作包括:1、網(wǎng)絡(luò)安全態(tài)勢評估方法和關(guān)鍵技術(shù)的研究。分析和對比不同的態(tài)勢評估方法,參考已有的網(wǎng)絡(luò)安全態(tài)勢指標(biāo)處理成果,對區(qū)域網(wǎng)絡(luò)中的各種網(wǎng)絡(luò)安全因素包括(硬件資產(chǎn)、設(shè)備狀況、安全警報(bào)、事件日志等)進(jìn)行清洗、采集和維度劃分,采用模糊層次分析法劃分當(dāng)前范圍內(nèi)的網(wǎng)絡(luò)安全態(tài)勢值,從而建立全面完善的網(wǎng)絡(luò)安全態(tài)勢指標(biāo)體系。經(jīng)過分析區(qū)域網(wǎng)絡(luò)中的拓?fù)浣Y(jié)構(gòu)和組織結(jié)構(gòu)并參考國內(nèi)外學(xué)者已有的信息系統(tǒng)風(fēng)險(xiǎn)評估成果,利用數(shù)據(jù)融合技術(shù)構(gòu)建評估指標(biāo)體系應(yīng)該遵循從點(diǎn)到面、自內(nèi)而外的評估策略。通過態(tài)勢理解技術(shù)的分析,對防火墻、服務(wù)器等硬件設(shè)施的日志記錄和掃描結(jié)果等經(jīng)過權(quán)重處理和一致化檢驗(yàn)的信息進(jìn)行關(guān)聯(lián)分析,建立威脅傳播網(wǎng)絡(luò)數(shù)據(jù)集。2、基于GA-RBF神經(jīng)網(wǎng)絡(luò)的預(yù)測模型的構(gòu)建。本文比較了幾種常見的態(tài)勢預(yù)測方法,確定了基于徑向基函數(shù)神經(jīng)網(wǎng)絡(luò)的態(tài)勢預(yù)測方法,結(jié)合已有的實(shí)驗(yàn)環(huán)境和數(shù)據(jù)構(gòu)建出適合用于區(qū)域網(wǎng)絡(luò)信息系統(tǒng)安全的網(wǎng)絡(luò)安全態(tài)勢預(yù)測模型。模型利用遺傳算法從模擬種族進(jìn)化的過程中找出適合的控制因子集合和參數(shù)因子集合的組合方式,對集合進(jìn)行自然選擇,交叉、變異,能很好地克服反饋緩慢問題,通過定義非線性時間和數(shù)據(jù)集合的關(guān)系,來構(gòu)建預(yù)測模型應(yīng)用到系統(tǒng)中。3、安全態(tài)勢感知系統(tǒng)的設(shè)計(jì)與實(shí)現(xiàn)。根據(jù)已有的網(wǎng)絡(luò)安全態(tài)勢評估模型與預(yù)測模型相結(jié)合,從傳統(tǒng)的系統(tǒng)設(shè)計(jì)入手,對網(wǎng)絡(luò)安全態(tài)勢感知系統(tǒng)進(jìn)行需求分析和功能定位,搭建基于區(qū)域網(wǎng)絡(luò)信息系統(tǒng)安全的網(wǎng)絡(luò)安全態(tài)勢感知系統(tǒng)的總體架構(gòu)。通過對感知系統(tǒng)進(jìn)行總體設(shè)計(jì),確定態(tài)勢采集層、態(tài)勢理解分析層、態(tài)勢預(yù)測層、態(tài)勢感知層、態(tài)勢展示層等子系統(tǒng)的功能和交互流程,基于各子系統(tǒng)的特點(diǎn)來分析支撐平臺和架構(gòu)設(shè)計(jì)中的實(shí)現(xiàn)方法,通過分析各模塊之間的數(shù)據(jù)流向,為各個子系統(tǒng)提出方案解決并實(shí)現(xiàn)具體的系統(tǒng)。
[Abstract]:The rapid development of computer technology and communication technology, network attack and defense technology innovation, network information system security threats, serious challenges. The development of network defense and attack means the norm under the Internet environment have resulted in a serious imbalance, the research of intelligent security defense system has become a hot spot. The development of data fusion technology makes network security evaluation to the comprehensive development, but the technology is limited to reflect the past and current network status, now it is difficult to adapt to the complex network environment, the development of network security tend to passive defense to active defense, intelligence, visualization, characteristics of global network security is particularly prominent, machine learning. The research and application of data mining method and technology has accelerated the development of network defense technology, especially the development of front-end technology for network visualization It provides a good technical support to the dynamic display of network security situation awareness system. Through the research of information system security incidents in the regional network, combined with the log information acquisition hardware in the network analysis method, the intelligent use situation of the network manager through intuitive visual display to judge the current situation of network security, perceived future network security the situation and make timely adjustments to protect network assets, improve the ability to prevent network attacks. The information system research and implementation of network security situation awareness system GA-RBF neural network the main work includes: 1, based on the research of the network security situation evaluation method and key technology. The evaluation method of analysis and comparison of different situation, with reference to the existing the network security situation index processing results, including a variety of network security factors in regional network (hardware assets, equipment condition, safety Alarm and event log etc.) for cleaning, collection and dimensions, using fuzzy AHP method to divide the current range of network security situation, so as to establish a system of comprehensive network security situation index. Through the risk analysis of information system topology and organization structure in regional network structure and the reference of domestic and foreign scholars have been the evaluation results the use of technology, constructing evaluation index system should follow from the point of data fusion, from the inside out assessment strategies. Through analysis of situation understanding technology, firewall, server hardware facilities such as log records and scanning results after processing and consistency of test weight information for association analysis, the establishment of threat propagation network data set.2 prediction model is constructed based on GA-RBF neural network. This paper compares several common forecasting methods of the situation, determined based on radial basis function neural The prediction method of network situation, combined with the experimental data and the environment has been constructed for the network security situation prediction model of regional network information system security model. By using the genetic algorithm from simulation evolved find control factor sets and parameters suitable for the combination for the subset of the set of natural selection, crossover, mutation that can be a good way to overcome the slow feedback problem, through the relationship between the definition of nonlinear time and data collection, to construct the prediction model is applied to the system of.3, the design and implementation of security situation awareness system. According to the model and prediction model of network security situation assessment has been combined, starting from the traditional system design, requirements analysis and the function of network security situation awareness system, build the overall framework of network security situation of regional network information system security awareness system based on The overall design of the structure. Through the sensing system to determine the situation situation understanding collection layer, analysis layer, situation prediction layer, situation awareness layer, situation display function and interactive process layer subsystems, the characteristics of each subsystem is analyzed based on the realization method of the supporting platform and architecture design, through the analysis of the data flow between the various modules for each subsystem, and proposes solutions to the specific implementation.

【學(xué)位授予單位】：寧夏大學(xué)
【學(xué)位級別】：碩士
【學(xué)位授予年份】：2017
【分類號】：TP393.08;TP183

【參考文獻(xiàn)】

相關(guān)期刊論文 前10條

1 藍(lán)灣灣;薛麗敏;趙秦豫;;基于廣義RBF神經(jīng)網(wǎng)絡(luò)的網(wǎng)絡(luò)安全態(tài)勢預(yù)測方法[J];指揮信息系統(tǒng)與技術(shù);2015年01期

2 謝麗霞;王亞超;;網(wǎng)絡(luò)安全態(tài)勢感知新方法[J];北京郵電大學(xué)學(xué)報(bào);2014年05期

3 石東源;熊國江;陳金富;李銀紅;;基于徑向基函數(shù)神經(jīng)網(wǎng)絡(luò)和模糊積分融合的電網(wǎng)分區(qū)故障診斷[J];中國電機(jī)工程學(xué)報(bào);2014年04期

4 謝麗霞;王亞超;于巾博;;基于神經(jīng)網(wǎng)絡(luò)的網(wǎng)絡(luò)安全態(tài)勢感知[J];清華大學(xué)學(xué)報(bào)(自然科學(xué)版);2013年12期

5 金敏;魯華祥;;一種遺傳算法與粒子群優(yōu)化的多子群分層混合算法[J];控制理論與應(yīng)用;2013年10期

6 周長建;司震宇;邢金閣;劉海波;;基于Deep Learning網(wǎng)絡(luò)態(tài)勢感知建模方法研究[J];東北農(nóng)業(yè)大學(xué)學(xué)報(bào);2013年05期

7 李鑫川;徐新剛;王紀(jì)華;武洪峰;金秀良;李存軍;鮑艷松;;基于時間序列環(huán)境衛(wèi)星影像的作物分類識別[J];農(nóng)業(yè)工程學(xué)報(bào);2013年02期

8 王春雷;方蘭;王東霞;戴一奇;;基于知識發(fā)現(xiàn)的網(wǎng)絡(luò)安全態(tài)勢感知系統(tǒng)[J];計(jì)算機(jī)科學(xué);2012年07期

9 尤馬彥;凌捷;郝彥軍;;基于Elman神經(jīng)網(wǎng)絡(luò)的網(wǎng)絡(luò)安全態(tài)勢預(yù)測方法[J];計(jì)算機(jī)科學(xué);2012年06期

10 席榮榮;云曉春;金舒原;張永錚;;網(wǎng)絡(luò)安全態(tài)勢感知研究綜述[J];計(jì)算機(jī)應(yīng)用;2012年01期

相關(guān)博士學(xué)位論文 前1條

1 張勇;網(wǎng)絡(luò)安全態(tài)勢感知模型研究與系統(tǒng)實(shí)現(xiàn)[D];中國科學(xué)技術(shù)大學(xué);2010年

相關(guān)碩士學(xué)位論文 前4條

1 王雪;基于時間序列分析的網(wǎng)絡(luò)安全態(tài)勢預(yù)測模型研究[D];北京郵電大學(xué);2015年

2 翁乾村;認(rèn)知網(wǎng)絡(luò)端到端態(tài)勢評估與預(yù)測技術(shù)研究[D];南京郵電大學(xué);2013年

3 任亮;面向網(wǎng)絡(luò)安全態(tài)勢感知的多協(xié)議網(wǎng)絡(luò)拓?fù)浒l(fā)現(xiàn)技術(shù)研究[D];哈爾濱工程大學(xué);2012年

4 汪松泉;遺傳算法在組合優(yōu)化中的應(yīng)用研究[D];安徽大學(xué);2010年

，

本文編號：1473685