Abstract:A hierarchical online risk assessment model is proposed in this paper,which can assess real-time risks caused by an ongoing intrusion scenario at service level,host level and network level.D-S evidence theory is used to fuse multiple variables of an alert thread which can reflect risk trend to calculate the risk index at service level.The risk situation at service level is evaluated by combining the risk index with target risk distribution character.The character is determined by the importance of attacked services.A risk assessment approach based on the barrel principle is proposed to evaluate the risk situation at host level.The security dependency network concept and its corresponding properties are defined.An improved algorithm of risk propagation is used to assess the risk situation in network level.The proposed assessment model properly combines alert processing algorithms,including alert verification,alert aggregation,alert correlation and alert confidence learning,with risk assessment.As a result,the model can deal with the problems of subjectivity fuzziness and uncertainty very well.The experiments show that the online risk assessment results accord with the real situation of attacks.Therefore the hierarchical risk assessment approach gives a strong support to intrusion response time decision-making,intrusion response measure decision-making and response adjustment.

DS THEORY AND HIERARCHICAL WEIGHT BASED NETWORK SECURITY RISK ASSESSMENT

Hierarchical Risk Assessment Method for Network Security Based on Real-Time Warning

Research on Hierarchical Network Security Threat Situation Assessment

Multi-dimensional Network Security Situation Assessment

Hierarchical Online Risk Assessment for Intrusion Scenarios

Network Security Risk Assessment Model and Method Based on Situation Awareness

Research on network risk situation assessment based on threat analysis

Research on network security assessment method based on weight of node

RESEARCH ON THE DESIGN OF NETWORK RISK ASSESSMENT MODEL

A Network Security Situation Assessment Method Based on Cross-Layer Awareness

Network security risk assessment and situation analysis

The Model of Network Security Risk Assess Based on Fuzzy Algorithm and Hierarchy

Research on Network Security Situation Assessment and Quantification Method Based on Analytic Hierarchy Process

Assessment and Validation of Network Security Situation Based on DS and Knowledge Fusion

Big Data-Driven Hierarchical Local Area Network Security Risk Event Prediction Algorithm

Multi-Dimension Threat Situation Assessment Based on Network Security Attributes

A Novel Approach to Network Security Situation Assessment Based on Attack Confidence

A Risk Assessment Method of the Wireless Network Security

A Novel Network Security Risk Assessment Approach by Combining Subjective and Objective Weights under Uncertainty

A Hierarchical Framework of Security Situation Assessment for Information System

An Attack Graph Based Network Security Evaluation Model for Hierarchical Network