Multilevel network security monitoring and evaluationmodel

作者：Yang Jin; Liu Tang; Peng Lingxi^*; Li Xuejun; Luo Gang

来源：Journal of Software, 2011, 6(5): 806-813.

DOI：10.4304/jsw.6.5.806-813

• Application layers
• Artificial immune
• Artificial Immune System
• Design to build
• Evaluation system
• Information base
• Intrusion detection and prevention
• Intrusion prevention systems
• Knowledge base
• Network integration
• Network intrusions
• New model
• Quantitative measurement
• Real-time networks
• Risk evaluation
• Security monitoring

Based on the correspondence between the artificial immune system antibody and pathogen invasion intensity, this paper is to establish a real-time network risk evaluation model. According to the network intrusion own characteristics and the consequence from service, assets and attack, this paper design to build a hierarchical, quantitative measurement indicator system, and an unified evaluation information base and knowledge base. The paper also combines assets evaluation system and network integration evaluation system, considering from the application layer, the host layer, network layer may be factors that affect the network risks. The experimental results show that the new model improves the ability of intrusion detection and prevention than that of the traditional passive intrusion prevention systems. ? 2011 ACADEMY PUBLISHER.

• 出版日期2011
• 单位乐山师范学院; 四川师范大学; 广州大学