积极主动的网络安全态势感知体系构建

摘要

Network threat is becoming more professional, organizational and national that it challenges current network security situation awareness greatly. This paper proposed an active network security situation awareness framework, which extended the data gathering region through the combination of active probing and passive monitoring, implemented multiple layer data fusion, and then tried to realize threat awareness in the whole process of network attacks.%在网络威胁日趋专业化、组织化与国家化的背景下，网络安全态势感知正面临极大的挑战。文章提出应构建积极主动的网络安全态势感知体系，通过主动探测与被动监测相结合的传感器网络，拓展针对网络威胁的数据采集域，进行多层次数据融合，力争实现对网络威胁的全程感知。