Framework for risk assessment in cyber situational awareness

作者：Xi Rongrong^*; Yun Xiaochun; Hao Zhiyu

来源：IET Information Security, 2019, 13(2): 149-156.

DOI：10.1049/iet-ifs.2018.5189

• risk management
• computer network security
• cyber situational awareness
• network analysts
• network security situation
• traditional detection
• prevention measures
• network situation
• risk assessment

A large number of data is generated to help network analysts to evaluate the network security situation in traditional detection and prevention measures, but it is not used fully and effectively, there is not a holistic view of the network situation on it for now. To address this issue, a framework is proposed to evaluate the security situation of the network from three dimensions: threat, vulnerability and stability, and merge the results at decision level to measure the security situation of the overall network. In the case studies, the authors demonstrate how the framework is deployed in the network and how to use it to reflect the security situation of the network in real time. Results of the case study show that the framework can evaluate the security situation of the network accurately and reasonably.

• 出版日期2019-3
• 单位中国科学院信息工程研究所