Survey of network security situational awareness

Abstract

With the increasing importance of cyberspace security, more attention is being paid to the research and application of network security situation awareness (NSSA). NSSA realizes behavior identification, intention understanding and impact assessment of various activities in the network to support reasonable security response decisions. It is a means of quantitative analysis of network security. Network security management system can grasp the security situation of the whole network and analyze the intentions of attackers with the help of network security management system. It provides an important basis for management decision-making. Then, it summarizes network security from three aspects: extraction of elements of network security situation, evaluation of network security situation and prediction of network security situation. Research status and development trend of situational awareness.