基于隐马尔可夫模型的网络安全态势预测方法

摘要

In order to help network administrators make correct decisions and take effective defense measures, a hidden Markov prediction model was put forward. The characteristics of network security situation changes were investigated, the time series analysis method was used to describe the dependent relationship between the former and the latter’s security situations in different time. When the security situation was deviated from its normal state, the change law was analyzed, and system change trend and development direction of security situation in the future were predicted by the prediction model. Finally, the network security situation prediction algorithm was verified using the simulation data. The simulation results verify the correctness of the method.%为了给网络管理员制定决策和防御措施提供可靠的依据，通过考察网络安全态势变化特点，提出构建隐马尔可夫预测模型。利用时间序列分析方法刻画不同时刻安全态势的前后依赖关系，当安全态势处于亚状态或偏离正常状态时，采用安全态势预测机制，分析其变化规律，预测系统的安全态势变化趋势。最后利用仿真数据，对所提出的网络安全态势预测算法进行验证。访真结果验证了该方法的正确性。