A Multi-Level Analysis Framework in Network Security Situation Awareness

摘要

Network Security Situation Awareness (NSSA) technology has been extensively studied in multi-data analyzing research these years. In this paper, we use a historical war story to explain the key points in situation awareness, present the conceptualizations and challenges aspects of NSSA, and discuss the methodologies of solving these problems. We provide an evaluation method for network security situation, and represent how to apply this method to NSSA. A multi-level analysis framework for NSSA is presented to demonstrate the advantages and effectiveness by using this method.