Research on Network Security Situation Awareness Technology Based on Artificial Immunity System

Liu, Nian; Diangang, Wang; Huang, Xuemei; Liu, Sunjun; Kui, Zhao

doi:10.1109/ifita.2009.487

Cited by 7 publications

(1 citation statement)

References 2 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In order to acquire the overall information of attack activities, such as time, place, multistage etc., we reconstruct attack scenarios from raw security events in [7] using the rudiment of correlation state machine, where the correlation state machine can not contribute to predict and assess cyber threat situation. Liu [8] presents a method of network security situation awareness based on artificial immunity system. The method uses network intrusion detection based on the theory of immunity as the base of situational awareness, to detect known and unknown intrusions with the help of biological technology.…”

Section: B Methods or Technologies In Situation Awarenessmentioning

confidence: 99%

Cyber Security Situation Awareness Based on Data Mining

Liu¹,

Feng²,

Li³

et al. 2013

AMR

View full text Add to dashboard Cite

Situation awareness is a kind of the third generation of information security technology, which aims to provide the global security views of the cyberspace for administrators. A framework of cyber security situation awareness based on data mining is proposed in this paper. The framework can be viewed from two perspectives, one is data flow, which presents the abstracting of cyber data, and the other one is logic view, which presents the procedure of situation awareness. The frameworks core component is correlation state machine, which is an extension of state machine. The correlation state machine is a data structure of achieving situation awareness, which is created based on the technology of data mining. After being created, it can be used to assess and predict the threat situation to achieve cyber knowledge. We conclude with an example of how the framework can be applied to real world to provide cyber security situation for administrators.

show abstract

Section: B Methods or Technologies In Situation Awarenessmentioning

confidence: 99%