A scalable model for network security situation based on endsley situation model

Abstract

Network Security Situation (NSS) awareness provides a macroscopical safety management, yet situation awareness is lacking in unified standard and norm. Base on the research by Endsley, this paper proposes a scalable model for network security situation and introduces the concept into the field of network security. In situation data processing, this model introduces the space/time knowledge base to regulate the situation extraction process, and takes the situation as entity object for modeling. The model includes attack frequency, attack time and space information to simplify the situation extraction process. This model is evaluated using real data to prove its usefulness and efficiency. © 2013 Springer-Verlag.