Research and Implementation of Network Transmission Situation Awareness

摘要

In recent years, Network Situation Awareness mainly concentrates on the security field, but therepsilas no research on Network Transmission Situation Awareness (NTSA). Comparing with traditional network management, NTSA(1) provides the comprehensive macroscopic view of network transmission status, strengthens the comprehension and control of network, and reduces the burden on administrators; (2) as a platform for integrating unit network managements, alters the current complexion that each function unit works independently, so the massive various information bring rich accurate assessment results; (3) is the predecessor of threat assessment and decision support. Following the above design ideas, a novel fusion-based NTSA architecture is proposed, assessment method combining clustering and Rough Set is designed. and NTSA prototype system is realized. The experiment results on real data set sKDDCuppsila99 and NLANR demonstrate the efficiency, effectiveness and scalability.