Abstract:Information technology has penetrated into all aspects of politics, economy, and culture of the whole society. The information revolution has changed the way of communication all over the world, promoted the giant development of human society, and also drawn unprecedented attention to network security issues. Studies, focusing on network security, have experienced four main stages: idealized design for ensuring security, auxiliary examination and passive defense, active analysis and strategy formulation, and overall perception and trend prediction. Under the background of the new strategic command for the digital control that all countries are scrambled for, the discussion of network security situational awareness presents new characteristics both in the academic study and industrialization. In this regard, a thorough investigation has been made in the present paper into the literature of network security situational awareness. Firstly, the research status both at home and abroad is introduced, and then, the logical analysis framework is put forward concerning the network security situational awareness from the perspective of the data value chain. The whole process is composed of five successive stages: factor acquisition, model representation, measurement establishment, solution analysis, and situation prediction. Subsequently, the role of each stage and the mainstream methods are elaborated, and the application results on the experimental objects and the horizontal comparison between the methods are explained. In an attempt to provide a panoramic recognition of network security situational awareness, and auxiliary ideas for the industrialization of network security, this paper aims to provide some references for the scientific research and engineering personnel in this field.

A Multi-Level Analysis Framework in Network Security Situation Awareness

Network Security Situation: from Awareness to Awareness-Control

Survey of Technology in Network Security Situation Awareness

A Novel Extended Algorithm for Network Security Situation Awareness

CNSSA: A Comprehensive Network Security Situation Awareness System

Network Security Situation Awareness System Based on Knowledge Discovery

A Network Security Situation Awareness Model Based on Risk Assessment

Network Security Situation Awareness Adaptive Control Model Based on Cognitive Network

Analysis framework of network security situational awareness and comparison of implementation methods

A Hierarchical Framework of Security Situation Assessment for Information System

Network Security Situation Awareness Technology Based on Multi-source Heterogeneous Data

A Survey of Network Security Situational Awareness Technology

Network Security Situation Assessment Based on Attack Graph Techniques

Modeling of Network Situation Awareness

An Extraction Method of Situational Factors for Network Security Situational Awareness

A Cyberspace Security Situation Awareness Model Based on Complex Network

A Strategy of Network Security Situation Autonomic Awareness

Real Time Situational Awareness Model for Large-scale Networks

Multi-source and Multi-Dimensional Network Security Situational Awareness Model

Study of network security situation awareness system based on Netflow

Research on Network Security Situation Awareness System Architecture Based on Multi-source Heterogeneous Sensors