Analysis framework of network security situational awareness and comparison of implementation methods

Abstract

Information technology has penetrated into all aspects of politics, economy, and culture of the whole society. The information revolution has changed the way of communication all over the world, promoted the giant development of human society, and also drawn unprecedented attention to network security issues. Studies, focusing on network security, have experienced four main stages: idealized design for ensuring security, auxiliary examination and passive defense, active analysis and strategy formulation, and overall perception and trend prediction. Under the background of the new strategic command for the digital control that all countries are scrambled for, the discussion of network security situational awareness presents new characteristics both in the academic study and industrialization. In this regard, a thorough investigation has been made in the present paper into the literature of network security situational awareness. Firstly, the research status both at home and abroad is introduced, and then, the logical analysis framework is put forward concerning the network security situational awareness from the perspective of the data value chain. The whole process is composed of five successive stages: factor acquisition, model representation, measurement establishment, solution analysis, and situation prediction. Subsequently, the role of each stage and the mainstream methods are elaborated, and the application results on the experimental objects and the horizontal comparison between the methods are explained. In an attempt to provide a panoramic recognition of network security situational awareness, and auxiliary ideas for the industrialization of network security, this paper aims to provide some references for the scientific research and engineering personnel in this field.

Situation Awareness Data Fusion Method Based on Library Events

“…The Internet of things comes from pervasive computing, which was proposed in 1991. It is generally believed that pervasive computing should be that computers exist anywhere in the physical world, but users do not know that these computers are providing them with various services [14,15]. Then in 1994, situational awareness was defined as a computer system with adaptive responses to the surrounding environment, illustrating the importance of the surrounding environment.…”

Real-Time Monitoring of Network Devices: Its Effectiveness in Enhancing Network Security

“…According to Li et a. (2019), integrating multilayered security in a network system makes it possible for network managers to identify and isolate any threat or possible attacks before they spread.…”

A Survey on Threat Situation Awareness Systems: Framework, Techniques, and Insights

“…Actually, abnormal behaviors are the activities inside a system which are opposite of the normal or logistic behaviors. Thus, the core of anomaly detection is established based on the monitoring of normal system operation to find out any deviation from the normal model [98].…”