NDLI: Research on Key Technologies of Network Security Situational Awareness for Attack Tracking Prediction

Content Provider	IET Digital Library
Author	Kou, Guang Wang, Shuo Tang, Guangming
Abstract	This paper analyzed the existing network security situation evaluation methods and discovered that they cannot accurately reflect the features of large-scale, synergetic, multi-stage gradually shown by network attack behaviors. For this purpose, the association between attack intention and network configuration information was deep analyzed. Then a network security situation evaluation method based on attack intention recognition was proposed. Unlike traditional method, the evaluation method was based on intruder. This method firstly made causal analysis of attack event and discovered and simplified intrusion path to recognize every attack phases, then realized situation evaluation based on the attack phases. Lastly attack intention was recognized and next attack phase was forecasted based on achieved attack phases, combined with vulnerability and network connectivity. A simulation experiments for the proposed network security situation evaluation model is performed by network examples. The experimental results show that this method is more accurate on reflecting the truth of attack. And the method does not need training on the historical sequence, so the method is more effective on situation forecasting.
Starting Page	162
Ending Page	171
Page Count	10
ISSN	10224653
Volume Number	28
e-ISSN	20755597
Issue Number	Issue 1, Jan (2019)
Alternate Webpage(s)	https://digital-library.theiet.org/content/journals/cje/28/1
Alternate Webpage(s)	https://digital-library.theiet.org/content/journals/10.1049/cje.2018.10.007
Journal	Chinese Journal of Electronics
Publisher Date	2019-01-01
Access Restriction	Open
Rights Holder	© Chinese Institute of Electronics
Subject Keyword	Achieved Attack Phase Attack Event Attack Intention Recognition Attack Phase Attack Tracking Prediction Computer Network And Technique Computer Network Security Data Security Existing Network Security Situation Evaluation Method Lastly Attack Intention Network Attack Behaviors Network Configuration Information Network Connectivity Network Examples Network Security Situation Evaluation Method Network Security Situation Evaluation Model Network Security Situational Awareness Security of Data Situation Forecasting Telecommunication Security Vulnerability
Content Type	Text
Resource Type	Article
Subject	Applied Mathematics Electrical and Electronic Engineering

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Comprehensive analysis of network security situational awareness methods and models

Framework for risk assessment in cyber situational awareness

Study on data mining method of network security situation perception based on cloud computing

Cauldron mission-centric cyber situational awareness with defense in depth

Network Security Evaluation through Attack Graph Generation

Functional requirements of situational awareness in computer network security

Icarfad: a novel framework for improved network security situation awareness.

An Extraction Method of Situational Factors for Network Security Situational Awareness

Network security situation quantitative evaluation based on the classification of attacks in attack-defense confrontation environment

Research on Key Technologies of Network Security Situational Awareness for Attack Tracking Prediction

Similar Documents

Comprehensive analysis of network security situational awareness methods and models

Framework for risk assessment in cyber situational awareness

Study on data mining method of network security situation perception based on cloud computing

Cauldron mission-centric cyber situational awareness with defense in depth

Network Security Evaluation through Attack Graph Generation

Functional requirements of situational awareness in computer network security

Icarfad: a novel framework for improved network security situation awareness.

An Extraction Method of Situational Factors for Network Security Situational Awareness

Network security situation quantitative evaluation based on the classification of attacks in attack-defense confrontation environment

Research on Key Technologies of Network Security Situational Awareness for Attack Tracking Prediction